711 matches found
Poster version.two index.php Account Manipulation Privilege Escalation
The remote host is running 'poster version.two' a news posting system written in PHP. There is a flaw in this version that allows new users to enter a specially crafted name that could allow them to gain administrative privileges on this installation. %NASLMINLEVEL 70300 C Tenable Network Securit...
miniPortail admin.php Cookie Manipulation Security Bypass
The remote host is running MiniPortal, a PHP application for managing a web portal. It is possible to bypass admin authentication by setting a cookie with a value of 'adminok' on admin.php. A remote attacker could exploit this to gain administrative privileges on this host. %NASLMINLEVEL 70300 C...
CVE-2003-1095
BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate...
php dotProject by pass authentication
SCAN Associates Sdn Bhd Security Advisory Product: dotProject 0.2.1.5 possibly other Vendor URL: http://www.dotmarketing.org/dotproject/ Summary: php dotProject by pass authentication Author: pokleyzz [email protected], sk [email protected], shaharil [email protected]...
BasiliX Webmail 1.1 - Message Content Script Injection
source: https://www.securityfocus.com/bid/5060/info BasiliX is a web-based mail application. It offers features such as mail attachments, address book, multiple language and theme support. A script injection issue has been reported in BasiliX Webmail. Script commands are not filtered from the...
BasiliX Webmail 1.1 - Message Content Script Injection
BasiliX Webmail 1.1 - Message Content Script Injection source: https://www.securityfocus.com/bid/5060/info BasiliX is a web-based mail application. It offers features such as mail attachments, address book, multiple language and theme support. A script injection issue has been reported in BasiliX...
Cosmicperl Directory Pro 2.0 - Arbitrary File Disclosure
source: https://www.securityfocus.com/bid/2793/info Webdirectory Pro is a web application used to create a searchable directory of links developed by Cosmicperl. Webdirectory Pro contains an input validation vulnerability which may lead to disclosure of sensitive information to attackers. The val...
Oatmeal Studios Mail File 1.10 - Arbitrary File Disclosure
source: https://www.securityfocus.com/bid/1807/info OatMeal studios' Mail-File is a cgi application that allows for sending of certain files to user-specified email addresses via a web interface. A vulnerability exists in this script that can be used to send the contents of any readable...
TalentSoft Web+ Client/Monitor/server 4.6 - Source Code Disclosure
source: https://www.securityfocus.com/bid/1722/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. Web+ can be used to display the source code of WML files residing on an NTFS parition by appending certain data to the known WML file. This...
TalentSoft Web+ Client/Monitor/server 4.6 - Internal IP Address Disclosure
source: https://www.securityfocus.com/bid/1720/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. A vulnerability exists in one of the CGI applications implemented by Web+. It is possible for a remote user to retrieve the internal IP address in ...
