45 matches found
Flexcustomer 0.0.6 - Admin Authentication Bypass Possible PHP Code Writing
Flexcustomer 0.0.6 - Admin Authentication Bypass Possible PHP Code Writing START 0x01 Informations: Script : Flexcustomer Download : http://www.hotscripts.com/jump.php?listingid=25331&jumptype=1 Vulnerability : Admin Login Bypass / Possible PHP code writing Author : Osirys Contact :...
CVE-2003-1487: Improper Input Validation
Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the 1 UserAdmin program, 2 Edit user profile, or 3 stats program...
FlexCustomer <= 0.0.4 sql injection
FlexCustomer = 0.0.4 sql injection Discovered by: Nomenumbra Date: 6/4/2006 impact:high privilege escalation,defacement FlexCustomer versions 0.0.4 and below are vulnerable to and SQL injection in the common user and admin-panel login as follows it really is SQL-injection 101 you know....: a' or...
CVE-2002-0096: Undefined Security Weakness
The installation of Geeklog 1.3 creates an extra groupassignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could provide that user with administrative privileges that were not intended...
CVE-2002-0096
The installation of Geeklog 1.3 creates an extra groupassignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could provide that user with administrative privileges that were not intended...