CVE-2006-2676

Dispatch.cgi/user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames...

CVE-2006-2676

CVE-2006-2676 affects SiteScape Forum 7.2 and possibly earlier. The vulnerability involves Dispatch.cgi/_user/uservCard/ returning responses that differ in a way that allows remote attackers to enumerate valid usernames. The NVD entry lists a CVSS v2 base score of 5.0 (MEDIUM), with network attac...

CVE-2006-2676

Dispatch.cgi/user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames...

vuBB <= 0.2 (Cookie) Final Remote SQL Injection Exploit (mq=off)

No description provided by source. !/usr/bin/perl print q ---------------------------------------------------------------------- vuBB =0.2 Final Remote SQL Injection cookies Exploit exploit discovered and coded by KingOfSKa https://contropotere.netsons.org...

phpWebSite 0.10.0-full - topics.php SQL Injection

phpWebSite 0.10.0-full - topics.php SQL Injection !/usr/bin/perl advisory sent in by SnIpErSA selfar2002athotmail.com http://www.target.com/topics.php?op=viewtopic&topic=-1%20Union%20select%20name,name,pass,name%20From%20users%20where%20uid=1 ported by str0ke milw0rm.com from x97Rangs code RST/GH...

CVE-2006-0129

CVE-2006-0129 affects Rockliffe MailSite prior to 7.0.3.1, specifically the Mail Management Agent (MAILMA) . The vulnerability arises because the server generates different responses based on whether a username is valid, allowing remote attackers to enumerate valid usernames via TCP port 106. The...

[Full-disclosure] Rockliffe Mailsite User Enumeration Flaw

Synopsis: Rockliffe's Mailsite Mail Management Server User Enumeration Flaw. Product: Rockliffe Mailsite http://www.rockliffe.com Version: Confirmed on Mailsite = 7.0.3.1 Author: Josh Zlatin-Amishav Date: January 4, 2006 Background: Rockliffe MailSite secure email server software and MailSite MP...

Multiple Rockliffe Mailsite mail server vulnerabilities

IMAP server user enumaration and directory traversal...

ProFTPD < 1.2.11 User Enumeration Vulnerability

ProFTPD is prone to a user enumeration vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:proftpd:proftpd"; Ref: LS...

[SA17383] Ringtail CaseBook Cross-Site Scripting and Username Enumeration

TITLE: Ringtail CaseBook Cross-Site Scripting and Username Enumeration SECUNIA ADVISORY ID: SA17383 VERIFY ADVISORY: http://secunia.com/advisories/17383/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: Ringtail CaseBook 6.x...

Juniper Netscreen VPN user enumeration

Different reply for existing user in IKE...

CVE-2005-2591

Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown vectors, aka the "User Enumeration" vulnerability...

CVE-2005-2591

Parlano MindAlign 5.0 and later versions are reported to be vulnerable to a User Enumeration flaw that allows remote attackers to list valid users via unknown vectors. The description confirms the affected product line but does not provide concrete exploit details, affected components, root cause...

CVE-2005-2591

Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown vectors, aka the "User Enumeration" vulnerability...

Several Vulnerability Issues Affecting the MindAlign

NISCC Vulnerability Advisory 356752/NISCC/MINDALIGN Several Vulnerability Issues Affecting the MindAlign Product Version Information Advisory Reference 356752/NISCC/MINDALIGN Release Date 12 August 2005 Last Revision 12 August 2005 Version Number 1.0 What is Affected? The following versions of th...

CVE-2002-2014

Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks...

Tarantella Secure Global Desktop user enumeration

If RSA SecurID is used for authentication error messages differes for invalid username...

Portcullis Security Advisory 05-002 Spectrum Cash Receipting System Weak Password Encryption

Portcullis Security Advisory Vulnerable System: Spectrum Cash Receipting System Vulnerability Title: Spectrum Cash Receipting System Weak Password Protection Vulnerability. Vulnerability discovery and development: Portcullis Security Testing Services. Affected systems: All known versions of...

ArGoSoft FTP Server user enumeration

Server reports invalid username...

Nortel Networks Contivity VPN Client information leakage vulnerability

Name: User Account Enumeration in Nortel Contivity VPN Vendor: Nortel Networks Products Affected: Nortel Networks Contivity VPN Client Type: Remote User Account Enumeration Severity: Medium I. Overview The Nortel Networks Contivity VPN Client authentication error message provides more information...