3718 matches found
[Full-disclosure] BetaBoard Cross Site Scripting vulnerability
//----- Advisory Program : BetaBoard Homepage : http://gonzo.uni-weimar.de/scheffl2/betaboard/ Tested version : 0.1 Found by : Simon MOREL philemon at thehackademy dot net This advisory : Simon MOREL philemon at thehackademy dot net Discovery date : 2006/04/16 //----- Application description...
Information disclosure
NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to 1 the profiles directory, which leaks e-mail addresses contained in filenames of profiles, and 2 the tmp directory, which lists names of uploaded attachments...
CVE-2006-0893
NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to 1 the profiles directory, which leaks e-mail addresses contained in filenames of profiles, and 2 the tmp directory, which lists names of uploaded attachments...
CVE-2006-0893
NOCC Webmail 1.0 is affected by an information-disclosure vulnerability where remote attackers can obtain sensitive data by directly requesting files in (1) the profiles directory (exposing e-mail addresses from profile filenames) and (2) the tmp directory (revealing uploaded attachment names). T...
CVE-2006-0893: Undefined Security Weakness
NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to 1 the profiles directory, which leaks e-mail addresses contained in filenames of profiles, and 2 the tmp directory, which lists names of uploaded attachments...
CVE-2005-4286
Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving "'smart' values for userid and password," probably involving an SQL injection vulnerability in the 1 pass and 2 usr parameters in submit.php...
CVE-2005-4286
The CVE-2005-4286 entry concerns PhpLogCon prior to 1.2.2. It describes an unspecified vulnerability that could allow remote attackers to use arbitrary profiles via unknown vectors, likely stemming from an SQL injection in submit.php affecting the pass and usr parameters. The available documents ...
CVE-2005-4286
Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving "'smart' values for userid and password," probably involving an SQL injection vulnerability in the 1 pass and 2 usr parameters in submit.php...
CVE-2005-3974
Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission...
CVE-2005-3974: Undefined Security Weakness
Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission...
DRUPAL-SA-2005-009 Bypass "view user profiles" permission
Andrew Widdowson informed us that it's possible to bypass the 'access user profile' permission if the server is running PHP5. No data can be changed though. Versions affected Drupal 4.6.0, 4.6.1, 4.6.2, 4.6.3 Solution If you are running Drupal 4.6.x and PHP5, then upgrade to Drupal 4.6.4...
CVE-2005-2866: Undefined Security Weakness
Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which allows local users to gain privileges...
Hummingbird FTP client weak encryption
Profiles are "encrypted" by XOR'ing with fixed byte value 0x7d...
Hummingbird FTP Weak Password Encryption
Hummingbird FTP Weak Password Encryption Critical: Less critical Impact: Exposure of sensitive information Where: Local system Solution Status: Unpatched Software: Hummingbird Connectivity 10.x http://connectivity.hummingbird.com/products/nc/cpia.html Description: A vulnerability has been...
Internet Explorer / MSN ICC Profiles Crash PoC Exploit
/-----------------------------edwardgagnon--------------/ Can crash msn and execute commands Windows has a buffer overflow vulnerability in the processing of embedded ICC Profiles inside images jpeg, tiff, etc... To test - create a jpeg in adobe photoshop and save it with the ICC checkbox enabled...
Microsoft Internet Explorer MSN - ICC Profiles Crash (PoC)
Microsoft Internet Explorer MSN - ICC Profiles Crash PoC /-----------------------------edwardgagnon--------------/ Can crash msn and execute commands Windows has a buffer overflow vulnerability in the processing of embedded ICC Profiles inside images jpeg, tiff, etc... To test - create a jpeg in...
MS Internet Explorer / MSN ICC Profiles Crash PoC Exploit
Exploit for unknown platform in category dos / poc ========================================================= MS Internet Explorer / MSN ICC Profiles Crash PoC Exploit ========================================================= /-----------------------------edwardgagnon--------------/ Can crash msn...
Microsoft Internet Explorer / MSN - ICC Profiles Crash (PoC)
/-----------------------------edwardgagnon--------------/ Can crash msn and execute commands Windows has a buffer overflow vulnerability in the processing of embedded ICC Profiles inside images jpeg, tiff, etc... To test - create a jpeg in adobe photoshop and save it with the ICC checkbox enabled...
CVE-2005-2257
PhpSlash 0.8.0 is affected by a vulnerability in the saveProfile function that allows remote attackers to modify arbitrary profiles and gain privileges by changing the author_id parameter. The available sources (CVE/NVD) describe the flaw and its impact as complete confidentiality, integrity, and...