385 matches found
CVE-2007-5432: Exposure of Sensitive Information to an Unauthorized Actor
Stride 1.0 has a default administrator username of "scott" with the password "running", which allows remote attackers to obtain administrative access through login.php...
russian-multi.txt
Dear [email protected], Vulnerabilities reported by different Russian speaking authors to http://securityvulns.ru 1. ElektAntichat.ru reports protection bypass vulnerability in PHP 4 and 5. disablefunctions feature can be bypassed by using functions alias. A list of aliases is given in...
Scott Manktelow Design Stride 1.0 - Content Management System main.php SQL Injection
Scott Manktelow Design Stride 1.0 - Content Management System main.php SQL Injection source: https://www.securityfocus.com/bid/26041/info Scott Manktelow Design Stride 1.0 Content Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied...
Scott Manktelow Design Stride 1.0 - 'Content Management System main.php' SQL Injection
source: https://www.securityfocus.com/bid/26041/info Scott Manktelow Design Stride 1.0 Content Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...