CVE-2008-7066

OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct request with the update parameter set to 1 and modified user and password parameters...

CVE-2008-7066

OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct request with the update parameter set to 1 and modified user and password parameters...

CVE-2008-7066: Undefined Security Weakness

OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct request with the update parameter set to 1 and modified user and password parameters...

2WIRE Gateway (Auth Bypass & Password Reset) Vulnerabilities #2

Exploit for unknown platform in category web applications =============================================================== 2WIRE Gateway Auth Bypass & Password Reset Vulnerabilities 2 =============================================================== 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RES...

2WIRE Gateway - Authentication Bypass Password Reset (2)

2WIRE Gateway - Authentication Bypass Password Reset 2 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET - Part 2 08/15/09 DESCRIPTION ----------------- Additional to the authentication bypass exploit page submitted by hkm. EXPLOIT/POC ----------------- Authentication Bypass - just use this pa...

2WIRE Gateway (Auth Bypass & Password Reset) Vulnerabilities #2

No description provided by source. 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET - Part 2 08/15/09 DESCRIPTION ----------------- Additional to the authentication bypass exploit page submitted by hkm. EXPLOIT/POC ----------------- Authentication Bypass - just use this page to set a new...

2WIRE Gateway - Authentication Bypass / Password Reset (2)

2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET - Part 2 08/15/09 DESCRIPTION ----------------- Additional to the authentication bypass exploit page submitted by hkm. EXPLOIT/POC ----------------- Authentication Bypass - just use this page to set a new password...

CVE-2009-2762

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

DEBIAN-CVE-2009-2762

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

CVE-2009-2762

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

CVE-2008-6971

The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...

CVE-2009-2762

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

Code injection

The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...

Design/Logic Flaw

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

CVE-2009-2762

CVE-2009-2762 affects WordPress ≤ 2.8.3. The vulnerability allows remote attackers to trigger a password reset for the first user (potentially admin) by supplying a key[] array to the resetpass (rp) action, bypassing the check that key is not an array. This is a network‑level exploit with a CVSSv...

CVE-2009-2762

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

CVE-2008-6971

The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...

CVE-2008-6971

CVE-2008-6971 describes a by-design weakness in Simple Machines Forum (SMF) where password reset codes are generated using an insecure random-number state exposed in a hidden form field. A remote attacker could predict validation codes for the password reset, enabling modification of other users’...

CVE-2009-2762

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

2WIRE Gateway Bypass / Reset

2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET ==================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password even if the password was previously set. By setting a n...