CVE-2008-2682

RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including 1 cUserRole, 2 cUserName, and 3 cUserID...

CVE-2008-2679

CVE-2008-2679 is a SQL injection vulnerability in Realm CMS 2.3 and earlier. The flaw occurs in the KeyWordsList function (/_includes/inc_routines.asp) via the kwrd parameter in a kwl action to the default URI, potentially allowing remote attackers to execute arbitrary SQL. Public references conf...

CVE-2008-2679

SQL injection vulnerability in the KeyWordsList function in includes/incroutines.asp in Realm CMS 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the kwrd parameter in a kwl action to the default URI...

CVE-2008-2680

Multiple cross-site scripting XSS vulnerabilities in db/compact.asp in Realm CMS 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 CmpctedDB and 2 Boyut parameters...

CVE-2008-2680

CVE-2008-2680 concerns multiple XSS vulnerabilities in Realm CMS

CVE-2008-2681

Summary: CVE-2008-2681 affects Realm CMS 2.3 and earlier. The vulnerability allows remote attackers to obtain sensitive information by issuing a direct request to the path _db/compact.asp, which exposes the database path inside an error message. What’s affected: Realm CMS versions up to 2.3 (and ...

CVE-2008-2682

RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including 1 cUserRole, 2 cUserName, and 3 cUserID...

CVE-2008-2681

Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to db/compact.asp, which reveals the database path in an error message...

CVE-2008-2682

CVE-2008-2682 affects Realm CMS 2.3 and earlier (RealmAdmin/login.asp). The vulnerability allows remote attackers to bypass authentication and access admin pages by manipulating cookies (likely cUserRole, cUserName, cUserID). Public references indicate exploitation exists (e.g., exploit-db entry)...

Realm CMS <= 2.3 Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

Realm CMS <= 2.3 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================ Realm CMS = 2.3 Multiple Remote Vulnerabilities ================================================ AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin...

realm CMS 2.3 - Multiple Vulnerabilities

realm CMS 2.3 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

realm CMS 2.3 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/40 1. Description:...

realmcms-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/40 1. Description:...

CVE-2008-0045

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

Cross site scripting

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

CVE-2008-0045

CVE-2008-0045 affects Apple Mac OS X 10.4.11: the AFP Server’s handling of Kerberos principal realm names contains an error that could allow remote attackers to bypass cross-realm authentication and establish unauthorized connections. The issue is documented among multiple vulnerabilities address...

CVE-2008-0045

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

Debian Security Advisory DSA 269-2 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 269-2. OpenVAS Vulnerability Test $Id: deb2692.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 269-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 476-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 476-1. OpenVAS Vulnerability Test $Id: deb4761.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 476-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...