CVE-2008-2680

CVE-2008-2680 concerns multiple XSS vulnerabilities in Realm CMS

CVE-2008-2682

CVE-2008-2682 affects Realm CMS 2.3 and earlier (RealmAdmin/login.asp). The vulnerability allows remote attackers to bypass authentication and access admin pages by manipulating cookies (likely cUserRole, cUserName, cUserID). Public references indicate exploitation exists (e.g., exploit-db entry)...

CVE-2008-2679: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the KeyWordsList function in includes/incroutines.asp in Realm CMS 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the kwrd parameter in a kwl action to the default URI...

CVE-2008-2680: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in db/compact.asp in Realm CMS 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 CmpctedDB and 2 Boyut parameters...

CVE-2008-2681: Exposure of Sensitive Information to an Unauthorized Actor

Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to db/compact.asp, which reveals the database path in an error message...

CVE-2008-2682: Undefined Security Weakness

RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including 1 cUserRole, 2 cUserName, and 3 cUserID...

Realm CMS <= 2.3 Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

realm CMS 2.3 - Multiple Vulnerabilities

realm CMS 2.3 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

Realm CMS <= 2.3 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================ Realm CMS = 2.3 Multiple Remote Vulnerabilities ================================================ AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin...

realm CMS 2.3 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/40 1. Description:...

realmcms-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/40 1. Description:...

CVE-2008-0045

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

Cross site scripting

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

CVE-2008-0045

CVE-2008-0045 affects Apple Mac OS X 10.4.11: the AFP Server’s handling of Kerberos principal realm names contains an error that could allow remote attackers to bypass cross-realm authentication and establish unauthorized connections. The issue is documented among multiple vulnerabilities address...

CVE-2008-0045

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

Debian Security Advisory DSA 269-2 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 269-2. OpenVAS Vulnerability Test $Id: deb2692.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 269-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 476-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 476-1. OpenVAS Vulnerability Test $Id: deb4761.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 476-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-269-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 476-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 476-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 269-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 269-1. OpenVAS Vulnerability Test $Id: deb2691.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 269-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...