2789 matches found
Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities
Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...
Siteframe CMS 3.2.x SQL Injection/phpinfo() Multiple Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== Siteframe CMS 3.2.x SQL Injection/phpinfo Multiple Vulnerabilities ====================================================================...
CVE-2009-2344
The web-based management interfaces in Sourcefire Defense Center DC and 3D Sensor before 4.8.2 allow remote authenticated users to gain privileges via a $admin value for the admin parameter in an edit action to admin/user/user.cgi and unspecified other components...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the xslt script in the web-based management interface on the 2wire 1701HG, 1800HW, 2071HG, and 2700HG with firmware 3.17.5, 3.7.1, 4.25.19, or 5.29.51 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that...
[SECURITY] Fedora 10 Update: phpMyAdmin-3.1.3.1-1.fc10
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...
Rae Media Contact MS (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== Rae Media Contact MS Auth Bypass SQL Injection Vulnerability ============================================================== AUTHOR : b3hz4d Seyed Behzad Shaghasemi DATE : 03 De...
HP System Management Homepage < 2.1.12 Unspecified XSS
The remote host appears to be running HP System Management Homepage SMH, a web-based management interface for ProLiant and Integrity servers. The version of HP SMH installed on the remote host fails to sanitize user input to an unspecified parameter and script before using it to generate dynamic...
ZYWALL Referer Header XSS Vulnerability
Affected Software/Device: Zyxel ZYWall 100 Vulnerability: Cross Site Scripting Risk: Low Description: The ZyWALL 100 is designed to act as a secure gateway via xDSL/Cable modems or broadband routers for small to medium size companies. The ZyWALL 100 features an ICSA certified firewall, IPSec VPN...
[SECURITY] Fedora 7 Update: phpMyAdmin-2.11.5.1-1.fc7
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...
Cisco Unified Communications Web-based Management Vulnerability
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
Nortel VPN路由器多个远程非授权访问漏洞
Nortel VPN路由器为IP网络和因特网上的安全连接提供路由、VPN、防火墙、带宽管理、加密、认证和数据完整性功能。 Nortel VPN路由器上配置了两个默认的用户帐号（FIPSecryptedtest1219和FIPSunecryptedtest1219），这些用户帐号存储在了路由器各种隧道类型的默认LDAP，允许攻击者获得对专用网络的非授权访问。 Nortel VPN路由器使用基于Web的设备管理界面。大多数功能仅在管理员授权后才能使用，但通过精心创建的URL攻击者可以未经授权访问一些管理Web页面，控制某些配置设备。 此外Nortel...
Mcafee SecurityCenter远程命令执行漏洞
McAfee SecurityCenter是集中的基于Web的管理控制台，提供了报告和配置控制。 McAfee SecurityCenter及其他用户产品中存在多个漏洞，允许攻击者在有漏洞的系统上执行任意命令，导致完全入侵系统。 漏洞的利用需要用户被诱骗访问恶意网页或在收到邮件时执行某些形式的交互操作。 McAfee SecurityCenter 6.0.22 McAfee SecurityCenter 6.0 McAfee SecurityCenter 4.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Directory listing on B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD"
·= Security Advisory =· Issue: B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD" Discovered Date: 02/10/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.inoviatele.com/ Details: B-FOCuS Wireless Router is prone to a directory listing...
ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure
source: https://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to authenticate users before providing access to sensitive information. Exploiting thi...
ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure
ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure source: https://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to...
CVE-2006-4523
CVE-2006-4523 affects 2Wire HomePortal and OfficePortal Series modems/routers: the web-based management interface is vulnerable to a DoS via a CRLF sequence in a GET request, causing a crash. Root cause is input parsing of CRLF within the request; impact is partial availability loss. Connected do...
PDEstore XSS vuln.
PDEstore XSS vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/pdestore-xss-vuln.html vendor:www.smart-choices.org/docs/pdestore.html affected version:1.8 and prior Product Description: PDEstore Ver. 1.8 is an easy to easy to install, easy to u...
OfficeScan configuration file disclosure
Trend Micro OfficeScan Corporate Edition Japanese version: Virus Buster Corporate Edition web-based management console let anybody access /officescan/hotdownload without authentication. Reading the configuration file /officescan/hotdownload/ofcscan.ini will reveal information on your system. More...
ViRobot Linux Server addschup Multiple Overflows
The remote host is running ViRobot Linux Server, a commercial anti- virus product for Linux. According to its banner, the installed version of ViRobot Linux Server suffers from a remote buffer overflow vulnerability in its web-based management interface. By passing specially crafted data through...
Compaq Web-Based Management Agent Remote Overflow DoS
It was possible to kill the remote web server by requesting something like: / This is probably a Compaq Web Enterprise Management server. This flaw could be used to forbid managing machines. C Tenable Network Security, Inc. References: Message-ID: Date: Thu, 19 Jun 2003 00:05:14 +0200 CEST From:...