H3C ER5100 enterprise-grade Dual-Core Broadband Router web Management page exists validation vulnerability-vulnerability warning-the black bar safety net

Brief description: H3C ER5100 enterprise-level Broadband Router web Management page exists validation vulnerability, unauthorized visitors may modify, restart, and view most of the system configuration. Vulnerability proof: ! http://222.223.5.218:8080/home.asp?userLogin.asp...

Animal husbandry star php web site management system of 0day-vulnerability warning-the black bar safety net

A small program in the holding Station is discovered this app, then across to see the source code. Tragedy just happened! admin/login.php source: ? php sessionstart; include "../include/databaseConfig.inc.php"; $admin = $POST'admin'; $pass = md5$POST'pass'; $codes = $POST'codes'; if$GET'action'...

CVE-2011-1645

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute...

Design/Logic Flaw

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the 1 ping test parameter ...

CVE-2011-1645

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute...

CVE-2011-1645: Undefined Security Weakness

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute...

CVE-2011-1647: Exposure of Sensitive Information to an Unauthorized Actor

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified...

Cisco Security Advisory: Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities Advisory ID: cisco-sa-20110525-rvs4000 Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT...

Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities

...

Cisco Security Agent code execution

Code execution via Web management interface...

CVE-2011-0887

The web management portal on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie...

PhpMyAdmin “error.php”spoofing vulnerability-vulnerability warning-the black bar safety net

Release date: 2010-12-10 Update date: 2010-12-13 Affected system: phpMyAdmin phpMyAdmin 3. x Description: -------------------------------------------------------------------------------- phpMyAdmin is PHP written tool used by the WEB Management of MySQL. phpMyAdmin implementation on the presence...

Multiple D-Link routers authentication bypass vulnerability-vulnerability warning-the black bar safety net

International famous network equipment manufacturers D-LINKfriends communicationscompany multiple the router's Web Management Interface the presence of the authentication bypass vulnerability may cause unauthorized user to browse, modify the router's Management Configuration. In addition, there i...

CVE-2010-2594

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

CVE-2010-2594

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

PT-2010-4133 · Ibm +6 · Aix +7

Name of the Vulnerable Software and Affected Versions: InterSect Alliance Snare Agent versions 3.2.3 and earlier on Solaris InterSect Alliance Snare Agent versions 3.1.7 and earlier on Windows InterSect Alliance Snare Agent versions 1.5.0 and earlier on Linux and AIX InterSect Alliance Snare Agen...

CVE-2010-2594: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

Tandberg VCS Arbitrary File Retrieval

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: TANDBERG Video Communication Server Arbitrary File Retrieval Release Date:...

phpMyAdmin table parameter SQL injection vulnerability-vulnerability warning-the black bar safety net

Affected version: phpMyAdmin phpMyAdmin 3. x phpMyAdmin phpMyAdmin 2.11. x vulnerability describes:BUGTRAQ ID: 3 2 7 2 0 phpMyAdmin is PHP written tool used by the WEB Management of MySQL. phpMyAdmin./ phpmyadmin/libraries/dbtableexists. lib. php file does not properly filter table parameters:...