823 matches found
CVE-2007-1183
WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user's Real Name via whitespace, which has unknown impact and attack vectors...
Retrieve Windows Vista username and password-vulnerability warning-the black bar safety net
In Windows vista local administrator password of the hack in an article, we have introduced how to use the Elcom Soft of Proactive Password Auditor PPA to retrieve the lost or forgotten Windows Vista local administrator password, however, in relative terms, the PPA of the crack requires the user ...
Cross site scripting
Cross-site scripting XSS vulnerability in FlashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via the user name field when the user joins a chat room, a different vulnerability than CVE-2007-0807. NOTE: the provenance of this information is unknown; the details are...
CVE-2007-0834
The CVE-2007-0834 entry describes a Cross-Site Scripting (XSS) vulnerability in FlashChat 4.7.8. The flaw allows remote attackers to inject arbitrary web script or HTML via the user name field when a user joins a chat room (the vulnerability is distinct from CVE-2007-0807). Affected product: Flas...
CVE-2007-0834
Cross-site scripting XSS vulnerability in FlashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via the user name field when the user joins a chat room, a different vulnerability than CVE-2007-0807. NOTE: the provenance of this information is unknown; the details are...
Authentication flaw
The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...
CVE-2007-0405
The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...
TIS Internet Firewall Toolkit buffer overflow
Buffer overflow on FTP proxy oversized user name...
onlineer-20.txt
User Name Email Phone Fax Password = ID Next Click "Profile" ajann,Turkey ... Im Not Hacker! --...
Online Event Registration 2.0 - save_profile.asp Pass Change
Online Event Registration 2.0 - saveprofile.asp Pass Change User Name Email Phone Fax Password = ID Next Click "Profile" ajann,Turkey ... Im Not Hacker! -- milw0rm.com 2006-11-13...
CVE-2006-4876
Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via 1 the user name during login, or the 2 key or 3 fpwusername parameters in modules/register...
Jupiter CMS 1.1.41.1.5 - modulesregister Multiple SQL Injections
Jupiter CMS 1.1.41.1.5 - modulesregister Multiple SQL Injections source: https://www.securityfocus.com/bid/20048/info Jupiter CMSA is prone to multiple input-validation vulnerabilities, including cross-site scripting, SQL-injection, and arbitrary file-upload issues, because the application fails ...
Speedy ASP Forum - 'profileupdate.asp' User Pass Change
Speedy Forum User Pass Change // ajannUser Name : Example: Surname Name User Mail : Example: [email protected] User Ćd : Example: Ćd:1 Admin User Country : Choose Country Turkey Example: Turkey User Pass /f...
Invision Power Board 2.1.5 - search.php Remote Code Execution
Invision Power Board 2.1.5 - search.php Remote Code Execution !/usr/bin/perl Wed Apr 26 16:44:15 CEST 2006 [email protected] INVISION POWER BOARD 2.1.5 pr00f 0f c0ncept remote command execution. vuln credits goes to IceShaman. works only if you have perms to post a comment. Exploit with replye is...
Improper access control
Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as user name and password credentials. NOTE: the provenance of this information is unknown; the details are obtained fr...
CVE-2006-1683
SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name...
Sql injection
SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name...
Cross site scripting
Cross-site scripting XSS vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name fullname...
CVE-2006-0330
Cross-site scripting XSS vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name fullname...
www.miibeian.gov.cn ICP website record validation vulnerability-vulnerability warning-the black bar safety net
1: login to: 2: registration registration is over the phone does not receive text messages, no verification codeļ¼ 3: the return home page to 4: input user name, password, CAPTCHA and click Login 5: at this point you enter theāphone codeāandāmail codeā---- do not enter 6: in the address bar enterā...