MySQL 5.0 information leak?

Hi. I just upgraded to mysql 5.0.18 and started using all those cool new features. : But concerning VIEWs, I think the informationschema is too verbose to the user. I started creating a VIEW that searches information from several tables, mangles the data and gives the user a clean table with his...

Windows password weakness

Added: 12/19/2005 CVE: CVE-1999-0503 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...

CVE-2005-2508

dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts...

CVE-2005-2508

dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts...

CVE-2005-2508

The CVE-2005-2508 entry concerns Mac OS X 10.4.2, where dsidentity in Directory Services allows local users to add or remove user accounts. The vulnerability is a local privilege-abuse issue affecting the Directory Services component; exploitation would occur on systems with local access. Remedia...

Hosting Controller <= 6.1 Hotfix 2.2 Multiple Vulnerabilities

According to its version number, the installation of Hosting Controller on the remote host improperly allows an authenticated user to add hosting plans to his account, to edit the details of his own or anyone else's hosting plans, to view the folders of all resellers and the web admin, to add...

CVE-2002-1927

CVE-2002-1927 affects Aquonics File Manager 1.5. The vulnerability allows users with edit privileges to modify user accounts by editing the file userlist.cgi , giving an attacker the ability to alter user data (integrity impact). The underlying CVSS metrics indicate a local attack vector with low...

CVE-2002-1927

Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file...

CVE-2001-1483

One-Time Passwords In Everything a.k.a OPIE 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and static passphrases if the user account does exist...

CVE-2002-1731

The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF...

CVE-2002-1691

Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain unauthorized access...

CVE-2002-1731

Technical details about CVE-2002-1731 are not publicly available in the provided documents. Monitor for updates in connected sources for affected products, root cause specifics, and remediation guidance.

Ultimate PHP Board 1.8/1.9 - Weak Password Encryption

source: https://www.securityfocus.com/bid/13975/info Ultimate PHP Board is prone to a weak password encryption vulnerability. This issue is due to a failure of the application to protect passwords with a sufficiently effective encryption scheme. This issue may allow a malicious user to gain acces...

CVE-2005-0248

The Solaris Management Console SMC GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts...

[SA15038] netMailshar Professional Two Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: netMailshar Professional Two Vulnerabilities SECUNIA...

WebCT 4.1 vulnerable to XSS attacks

The discussion board feature of WebCT is vulnerable to XSS. Here is the proof of concept: When you are composing a new message, in the message field of the form, type this: /pretable background=javascript:alert"XSS Warning" /table Then submit the message. You should see a JavaScript alert box tha...

CVE-2004-1703

Fusion News 3.6.1 is affected. A remote attacker can add user accounts if the administrator is logged in by embedding an img bbcode tag in a comment that calls index.php with the signup action, which executes when the administrator’s browser loads the page containing the img tag. This is due to t...

CVE-2005-0248

The Solaris Management Console SMC GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts...

Alt-N WebAdmin MDaemon/RelayFax administration tool multiple bugs

Crossit scripting, user accounts editing, code execution...

alt-n WebAdmin 3.0.2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/12395/info Alt-n WebAdmin is reportedly affected by multiple remote vulnerabilities. The application is affected by multiple cross-site scripting issues. An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an...