PABox 1.6 - Password Reset

PABox 1.6 - Password Reset source: https://www.securityfocus.com/bid/8067/info paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel...

PABox 1.6 - Password Reset

source: https://www.securityfocus.com/bid/8067/info paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel...

CVE-2003-0494

password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id...

CVE-2003-0494: Undefined Security Weakness

password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id...

Multiple Vulnerabilities In Snitz Forums

Multiple Vulnerabilities In Snitz 3.4.0.3 ------------------------------------------- Versions Affected: 3.4.0.3 current / Others? Vendor Notification: Informed Vendor Website: http://www.snitz.com Product Description ------------------------------------------- Snitz Forums is a full-featured...

Snitz Forums 2000 3.4.0.3 - Multiple Vulnerabilities

Snitz Forums 2000 3.4.0.3 - Multiple Vulnerabilities Snitz Forums 2000 Multiple Vulnerabilities Vendor: Snitz Communications Product: Snitz Forums 2000 Version: alertdocument.cookie Cookie Authentication Bypass Vulnerability: In order to steal another users identity, all an attacker needs to know...

Snitz Forums 2000 < 3.4.0.3 - Multiple Vulnerabilities

Snitz Forums 2000 Multiple Vulnerabilities Vendor: Snitz Communications Product: Snitz Forums 2000 Version: alertdocument.cookie Cookie Authentication Bypass Vulnerability: In order to steal another users identity, all an attacker needs to know is thier encrypted password. This is not very hard t...

Maxwebportal 1.30 - search.asp?Search Cross-Site Scripting

Maxwebportal 1.30 - search.asp?Search Cross-Site Scripting source: https://www.securityfocus.com/bid/7837/info A number of vulnerabilities have been discovered in the MaxWebPortal. The issues that have been discovered include: MaxWebPortal 'search.asp' has been reported prone to a cross-site...

Maxwebportal 1.30 - Remote Database Disclosure

source: https://www.securityfocus.com/bid/7837/info A number of vulnerabilities have been discovered in the MaxWebPortal. The issues that have been discovered include: MaxWebPortal 'search.asp' has been reported prone to a cross-site scripting vulnerability. An attacker may execute arbitrary scri...

Maxwebportal 1.30 - 'search.asp?Search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/7837/info A number of vulnerabilities have been discovered in the MaxWebPortal. The issues that have been discovered include: MaxWebPortal 'search.asp' has been reported prone to a cross-site scripting vulnerability. An attacker may execute arbitrary scri...

hotmailpassport.txt

Hotmail & Passport .NET Accounts Vulnerability There is a very serious and stupid vulnerability or badcoding in Hotmail / Passport’s .NET Accounts I tried sending emails several times to Hotmail / Passport contact addresses, but always met with the NLP bots. I guess I don’t need to go in details ...

Snitz Forums 2000 3.4.03 Multiple Vulnerabilities

The remote host is using Snitz Forum 2000. This set of CGI is vulnerable to a cross-site-scripting issue that may allow attackers to steal the cookies of your users. In addition to this flaw, a user may use the file Password.ASP to reset arbitrary passwords, therefore gaining administrative acces...

CVE-2003-0162

Ecartis 1.0.0 formerly listar before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page...

Ecartis HTML Field Manipulation Arbitrary User Password Reset

The remote host is running the Ecartis Mailing List Manager web interface lsg2.cgi. According to its version number, there is a vulnerability that allows an authenticated user to change anyone's password, including the list administrators. An authenticated attacker could exploit this to take...

DSA-271 ecartis - unauthorized password change

Bulletin has no description...

CVE-2003-0162

Ecartis 1.0.0 formerly listar before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page...

CVE-2003-0162

CVE-2003-0162 affects Ecartis 1.0.0 (formerly listar) prior to the 20030227 snapshot. The vulnerability lets a remote attacker reset other users’ passwords and gain privileges by tampering with hidden HTML form fields. Debian and OpenVAS records tie this to a remote password-change flaw in ecarti...

CVE-2003-0162: Undefined Security Weakness

Ecartis 1.0.0 formerly listar before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page...

Ecardis Password Reseting Vulnerability

Hi, I don't know if someone has discovered this before but Ecartis 1.0.0 former listar contains a vulnerability that enables an attacker to reset passwords of any user defined on the list server, including the list admins. After logging on as a non-priviledged user, Ecartis enables the user to...

[VSA0306] YABBSE 1.4.1 SQL Injection Bugs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: void.at SA YaBB SE SQL Injection Bugs void.at Security Advisory VSA0306 YaBB SE is a web based forum written in PHP. Overview - -------- Due to sql injection bugs, it is possible for an remote user without an account to get access to user...