Lucene search
+L

306 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/06 12:00 a.m.•13 views

CVE-2004-2696: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation RMI over Internet Inter-ORB Protocol IIOP, does not properly handle when multiple logins for different users coming from the same client, which could cause an "unexpected user identity" to be used in a...

5.5CVSS5.8AI score0.01286EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2005/03/22 12:00 a.m.•28 views

phppost.txt

PHOX: PHP-Post Exploit Content - Credits - BICWAE - Solution - Contact Credits Exploit discovered by Phoxpherus Phorce, Phox R&P, Terencentanio Root32 Thanks to SilentWolf for the name BICWAE ... lmao BICWAE - Bypassing Input Check With Alternate Entries It's possible to 'spoof' your user identit...

7.4AI score
SaveExploits0
NVD
NVD
•added 2004/12/31 5:00 a.m.•24 views

CVE-2004-2696

BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation RMI over Internet Inter-ORB Protocol IIOP, does not properly handle when multiple logins for different users coming from the same client, which could cause an "unexpected user identity" to be used in a...

5.5CVSS6.6AI score0.01286EPSS
SaveExploits0References6
CERT
CERT
•added 2004/04/09 12:00 a.m.•22 views

BEA WebLogic Server fails to properly associate the user identity on subsequent client connections

Overview BEA WebLogic Server fails to properly associate a user's identity when a client attempts to connect multiple times using different client certificates. Description BEA Systems describes WebLogic Server as "an industrial-strength application infrastructure for developing, integrating,...

7.4AI score
SaveExploits0References3
securityvulns
securityvulns
•added 2002/01/11 12:00 a.m.•56 views

Cookie modification allows unauthenticated user login in Geeklog 1.3

A major security vulnerability exists in Geeklog 1.3, released on December 30th, 2001. When permanent cookies are enabled, as they are in a stock install, Geeklog stores a user's UID in a cookie upon successful login. This cookie is subsequently used during future visits to the site to...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2001/10/13 12:00 a.m.•45 views

PostNuke 0.6 - User Login

source: https://www.securityfocus.com/bid/3435/info PostNuke, successor to PHPNuke, is a content management system written in PHP. PostNuke versions 0.62 to 0.64 suffer from a vulnerability that allows a remote user to log-in as any user with known username and ID without authentication. The...

7.5CVSS5.8AI score0.03278EPSS
SaveExploits2
Rows per page
Query Builder