826 matches found
Authentication flaw
VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsnstopicid cookie to the targeted topic...
CVE-2006-1555
VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsnstopicid cookie to the targeted topic...
Fluxay Sensor Detection
This host appears to be running Fluxay Sensor on this port. Fluxay Sensor is a Backdoor which allows an intruder gain remote access to files on your computer. Similar to SubSeven This program is installs as a Service and is password protected. It protects itself so it is difficult to stop or...
YaPiG Password Protected Directory Access Flaw
The remote version of YaPiG a flaw that can let a malicious user view images in password protected directories. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2005-3432
MiniGal 2 MG2 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to wildcard and the page parameter set to all...
CVE-2005-3432
The CVE-2005-3432 issue affects MiniGal 2 (MG2) 0.5.1, where a remote attacker can cause listing of password-protected images by sending a request to index.php with list = * and page = all. The public sources describe the vulnerability as an information-disclosure flaw allowing access to protecte...
Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images
The MG2 Image Gallery system has the ability to make create online galleries. Even password protected once. By manipulating url from a gallery, you are able to list out all pictures in every gallery. Even though they are inside a password protected folder. Sample manipulation could be:...
MG2 0.5.1 - Authentication Bypass
source: https://www.securityfocus.com/bid/15235/info MG2 is affected by an authentication bypass vulnerability. This issue can allow remote attackers to gain access to password protected image galleries. All versions of MG2 are considered to be vulnerable at the moment. Minigal B13 is likely...
aRCHILLES Newsworld < 1.5.0-rc1 Multiple Vulnerabilities
aRCHILLES Newsworld 1.5.0-rc1 Multiple Vulnerabilities Software: aRCHILLES Newsworld Vulnerable versions: = 1.5.0-rc1 Type: Information Disclosure, Login Bypass Risk: Critical Date: 21st October 2005 Vendor: aRCHILLES http://www.scriptworld.kh-webcenter.de Credit: ======= These vulnerabilities we...
CVE-2004-2305
Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a password-protected file in a ZIP file, which causes eTrust to scan only the password protected file and skip the other files...
YaPiG Password Protected Directory Bypass
The remote host is running YaPiG, a web-based image gallery written in PHP. The remote version of this software contains a flaw that can let a malicious user view images in password protected directories. Successful exploitation of this issue may allow an attacker to access unauthorized images on...
CVE-2001-1464
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords...
CVE-2004-2220
F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain password-protected files in a ZIP file, which allows remote attackers to bypass anti-virus protection...
[SecurityOffice] Liteserve Web Server v2.0 Authorization Bypass Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Liteserve Web Server v2.0 Authorization Bypass Vulnerability -- - -- Type File Disclosure - -- Release Date October 24, 2002 - -- Product / Vendor LiteServe is a powerful, full-featured Web, EMail and FTP server. This server software is perfect fo...
Savant Web Server 3.1 - File Disclosure
source: https://www.securityfocus.com/bid/5709/info Savant Webserver is vulnerable to an input validation bug, that could allow malicious users access to password protected folders. It should be noted that versions below 3.1 may also be vulnerable to this issue. http://host/passwordfolder. "GET...
Blazix 1.2 - Password Protected Directory Information Disclosure
Blazix 1.2 - Password Protected Directory Information Disclosure source: https://www.securityfocus.com/bid/5567/info Blazix is a freely available, open source web server written in Java. It is available for Linux and Microsoft Windows operating systems. Blazix does not properly handle some specia...
CVE-2002-0347
Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. dot dot in an HTTP request...
CVE-2002-0347
The CVE-2002-0347 entry concerns a directory traversal vulnerability in the Cobalt RAQ 4 web server. An attacker can leverage a .. (dot dot) in an HTTP request to read files, including password-protected files, and potentially access files outside the web root. The issue is described in the NVD e...