HylaFAX: Multiple vulnerabilities

Background HylaFAX is an enterprise-class system for sending and receiving facsimile messages and for sending alpha-numeric pages. Description Patrice Fournier discovered that HylaFAX runs the notify script on untrusted user input. Furthermore, users can log in without a password when HylaFAX is...

[SA18159] Information Call Center "CallCenterData.mdb" Exposure of User Credentials

TITLE: Information Call Center "CallCenterData.mdb" Exposure of User Credentials SECUNIA ADVISORY ID: SA18159 VERIFY ADVISORY: http://secunia.com/advisories/18159/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Information Call Center...

CVE-2005-4249

ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory...

CVE-2005-4249

ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory...

Arki-DB 1.0 - catid SQL Injection

Arki-DB 1.0 - catid SQL Injection ArkiDB SQL Injection's ArkiDB catid Ramote SQL Injection's ---------------------- Bug By Devil-00 [email protected] Whe Ar All Love Security4Arab For Ever S4a.cc ------------------------------------------------- Explorer Exploit By Devil-00...

x-news 1

The remote web server contains a PHP application that is prone to information disclosure. Description : X-News is a news management system, written in PHP. X-News uses a flat-file database to store information. It will run on most Unix and Linux variants, as well as Microsoft Windows operating...

Oracle 9iAS OWA UTIL access

Oracle 9iAS can provide access to the PL/SQL application OWAUTIL that provides web access to some stored procedures. These procuedures, without authentication, can allow users to access sensitive information such as source code of applications, user credentials to other database servers and run...

WebLogic management servlet

The remote web server is WebLogic An internal management servlet which does not properly check user credential can be accessed from outside, allowing a cracker to change user passwords, and even upload or download any file on the remote server. In addition to this, there is a flaw in WebLogic 7.0...

CVE-2005-3414

eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials...

CVE-2005-3414

eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials...

CVE-2005-3414

CVE-2005-3414 affects eyeOS 0.8.4. The issue arises from storing usrinfo.xml in the web document root with insufficient access control, allowing remote attackers to obtain user credentials. The available connected documents confirm eyeOS 0.8.4 and the credential exposure risk, but do not provide ...

[SA17105] eyeOS Script Insertion and Exposure of User Credentials

TITLE: eyeOS Script Insertion and Exposure of User Credentials SECUNIA ADVISORY ID: SA17105 VERIFY ADVISORY: http://secunia.com/advisories/17105/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: eyeOS 0.x...

CVE-2005-2962

The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users to obtain the username and password...

Malicious setRequestHeader cross-site vulnerability

A malicious setRequestHeader can be used to stealuser credentials and inject cross-site JavaScript...

PHP-Fusion 6.00.109 - 'msg_send' SQL Injection

SQL Injection, poc: http://target/pathtoPhpFusion/messages.php?msgsend=' UNION SELECT userpassword FROM fusionusers WHERE username='adminusername'/ inserted the above for a better description /str0ke 19.17 28/09/2005 -- PhpF600109xpl.php PHP-Fusion v6.00.109 SQL Injection / admin|users credential...

PHP-Fusion 6.00.109 (msg_send) SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================== PHP-Fusion 6.00.109 msgsend SQL Injection Exploit ==================================================== SQL Injection, poc: http://target/pathtoPhpFusion/messages.php?msgsend=' UNION SELE...

PHP Advanced Transfer Manager <= 1.30 Multiple Vulnerabilities

Binary data 3234.prm...

Security Flaw in pam_per_user Module

Summary/Impact: --------------- There is a security flaw in the pamperuser PAM module that can allow someone to authenticate as any user on the system, provided that they already have the proper credentials for one account. This security hole is fixed in pamperuser-0.4, which is available from:...

CVE-2005-2859

Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to gain privileges...

CVE-2005-2859

Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, enabling local privilege escalation. Affected component: Savant Web Server; root cause: plaintext credential storage leading to unauthorized access. CVSS2 shows LOCAL attack with low complexity; base impact i...