9251 matches found
versatileBulletinBoard 1.00 RC2 (board takeover) SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== versatileBulletinBoard 1.00 RC2 board takeover SQL Injection Exploit ====================================================================== ?php --- versatilexpl.php 4....
Cyphor 0.19 SQL Injection / Board takeover / cross site scripting
Cyphor 0.19 SQL Injection / Board takeover / cross site scripting 1if magic quotes off - SQL Injection: by "Forgot your password?" feature you can send yourself a new admin password and reset it, poc: email: youremail nick: 'or'X'='X soon, you will receive an email like this: You have registered...
[SA17009] Macromedia Breeze Password Reset Security Issue
TITLE: Macromedia Breeze Password Reset Security Issue SECUNIA ADVISORY ID: SA17009 VERIFY ADVISORY: http://secunia.com/advisories/17009/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Macromedia Breeze 5.x http://secunia.com/product/5779/...
Macromedia Breeze information leak
"reset password" feature stores password in clear text...
CVE-2005-3101
The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...
CVE-2005-3101
The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...
CVE-2005-3101
Movable Type prior to 3.2 exposes username enumeration via the password reset feature: authentication messages differ based on user existence, enabling remote attackers to determine valid usernames. No other details provided in the connected docs.
CVE-2005-3101: Undefined Security Weakness
The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...
MailGust 1.9 SQL Injection
MailGust 1.9 SQL injection / board takevor software: site: http://www.mailgust.org/ description: Mailgust is three softwares in one: Mailing list manager Newsletter distribution tool Message Board Mailgust is written in php and uses a mysql database. vulnerability: if magic quotes off - SQL...
Movable Type < 3.2 Multiple Vulnerabilities
The version of Movable Type installed on the remote host is affected by multiple vulnerabilities : - The application allows an attacker to enumerate valid usernames because its password reset functionality returns different errors depending on whether the supplied username exists. CVE-2005-3101 -...
Hosting Controller 0.6.1 - User Registration (3)
Hosting Controller 0.6.1 - User Registration 3 Username : emailaddress : firstname : milw0rm.com 2005-05-27...
Hosting Controller 0.6.1 - User Registration (3)
Username : emailaddress : firstname : milw0rm.com 2005-05-27...
Cisco Linksys WET11 wireless ethernet bridge unauthorized access
It's possible to reset device password with web interface...
IBM WebSphere Commerce ResetPassword Servlet Caching Information Disclosure
The remote host is running a version of IBM WebSphere Commerce that may allow an attacker to conduct a brute-force attack against users who have recently had their passwords invalidated in WebSphere Commerce and uncover private information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
advisory002.txt
======================================================= Multiple vulnerabilities in punbb-1.2.1 profile.php ======================================================= Description ----------- A remote attacker without an account can set the password of any user on the system to NULL, effectivley...
CVE-2004-1591
CVE-2004-1591 affects the Micronet Wireless Broadband Router SP916BM (firmware before 1.9). The web interface resets the router password to the default password when the device is shut off, potentially allowing an attacker to gain access remotely. The available documents confirm the affected prod...
CVE-2004-1591: Undefined Security Weakness
The web interface for Micronet Wireless Broadband Router SP916BM running firmware before 1.9 08/04/2004 resets the password to the default password when the router is shut off, which could allow remote attackers to gain access...
exploit in PHPBB 2010
explode: form action="" method="post" URL до форума:input type="text" name="url" size="50" value="http://www.phpbbexample.ru/forum/"br Колличество запросов:select name="select" size="1" option value="10"10/option option value="100"100/option option value="200"200/option option value="500"500/opti...
CVE-2002-0672: Undefined Security Weakness
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null...