CVE-2006-6192: Undefined Security Weakness

Unspecified scripts in the admin directory in 8pixel.net SimpleBlog 3.0 and earlier do not properly perform authentication, which allows remote attackers to add users and perform certain other unauthorized privileged actions. NOTE: The provenance of this information is unknown; the details are...

Design/Logic Flaw

Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform privileged actions by modifying the 1 actionID and 2 pageID parameters. NOTE: due to an error during reservation, this identifier was inadvertently associated...

CVE-2006-1628

Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01 allows users to authenticate and perform privileged actions when their account is marked "OBSOLETE" but the account is also active, within the authentication system...

CVE-2006-1628

Affected software : Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01. Vulnerability : an authentication flaw where accounts marked as OBSOLETE can still authenticate and perform privileged actions. Root cause : mismatch in account state vs. authentication/authorization in the authen...

CVE-2006-1627: Undefined Security Weakness

Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform privileged actions by modifying the 1 actionID and 2 pageID parameters. NOTE: due to an error during reservation, this identifier was inadvertently associated...

CVE-2006-1628: Undefined Security Weakness

Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01 allows users to authenticate and perform privileged actions when their account is marked "OBSOLETE" but the account is also active, within the authentication system...

Design/Logic Flaw

WHMCompleteSolution WHMCS before 2.3 assigns incorrect permissions to "resellers", which allows remote authenticated users to perform privileged actions or obtain sensitive information. NOTE: this report is based on a vendor bug report that identified "incorrect permissions." However, the vendor...

CVE-2006-0652: Undefined Security Weakness

WHMCompleteSolution WHMCS before 2.3 assigns incorrect permissions to "resellers", which allows remote authenticated users to perform privileged actions or obtain sensitive information. NOTE: this report is based on a vendor bug report that identified "incorrect permissions." However, the vendor...

CVE-2006-0500

MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, which allows remote attackers to perform unspecified privileged actions by directly accessing files via a URL...

CVE-2006-0500: Undefined Security Weakness

MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, which allows remote attackers to perform unspecified privileged actions by directly accessing files via a URL...

Hardcoded credentials

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

CVE-2006-0478

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

CVE-2006-0478

CRE Loaded 6.15 is affected by CVE-2006-0478, where remote attackers can perform privileged actions—including uploading and creating arbitrary files—by sending a direct request to files.php. The vulnerability’s root cause is described through the vendor’s note that a patch exists to close the iss...

CVE-2006-0478

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...

CVE-2006-0478: Undefined Security Weakness

CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the...