Lucene search
+L

3550 matches found

Prion
Prion
added 2009/07/14 2:30 p.m.16 views

Authentication flaw

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

7.5CVSS7.7AI score0.02511EPSS
SaveExploits2References4Affected Software1
Prion
Prion
added 2009/07/14 2:30 p.m.16 views

Authentication flaw

Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

7.5CVSS7.7AI score0.02588EPSS
SaveExploits2References5Affected Software1
Prion
Prion
added 2009/07/14 2:30 p.m.22 views

Authentication flaw

Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

7.5CVSS7.7AI score0.02511EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2009/07/14 2:00 p.m.50 views

CVE-2008-6858

CVE-2008-6858 affects Absolute Banner Manager .NET 4.0. The weakness allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a specific value. The official description consistently states this is an authentication bypass leading to admin-level access...

7.5CVSS7.4AI score0.02511EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2009/07/14 2:00 p.m.49 views

CVE-2008-6857

CVE-2008-6857 affects Absolute Podcast .NET 1.0. The issue lets a remote attacker bypass authentication and gain administrative access by setting a specific cookie value. The vulnerability is described in CVE sources as an authentication bypass with partial confidentiality/integrity/availability ...

7.5CVSS7.4AI score0.02588EPSS
SaveExploits2References5Affected Software1
CVE
CVE
added 2009/07/14 2:00 p.m.62 views

CVE-2008-6859

Consolidated data from connected documents confirms CVE-2008-6859 affects Xigla Software Absolute Control Panel XE 1.5. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting a specific cookie value. Exploitation is feasible over network wit...

7.5CVSS7.4AI score0.02511EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2009/07/14 2:00 p.m.28 views

CVE-2008-6858

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

7.1AI score0.02511EPSS
SaveExploits2References4
CVE
CVE
added 2009/07/14 2:00 p.m.64 views

CVE-2008-6863

CVE-2008-6863 : Xigla Software Absolute Form Processor .NET 4.0 contains an authentication bypass. Remote attackers can gain administrative access by setting a specific cookie value. Impact is described as partial confidentiality, integrity, and availability with a CVSS v2 base score of 7.5 (HIGH...

7.5CVSS7.4AI score0.02511EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2009/07/14 2:00 p.m.53 views

CVE-2008-6862

The CVE-2008-6862 issue affects Absolute Content Rotator 6.0, where remote attackers can bypass authentication and gain administrative access by setting a specific cookie value. Affected component: authentication mechanism in the product (cookie-based bypass). Documented impact: administrative pr...

7.5CVSS7.4AI score0.02511EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2009/07/14 2:00 p.m.53 views

CVE-2008-6861

The CVE-2008-6861 issue affects Xigla Software Absolute Newsletter (version 6.0 and 6.1). The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a specific cookie value, enabling partial confidentiality/integrity/availability impact as per the...

7.5CVSS7.4AI score0.02511EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2009/07/14 2:00 p.m.55 views

CVE-2008-6860

CVE-2008-6860 affects Xigla Software Absolute Poll Manager XE 4.1. The vulnerability is an authentication bypass: remote attackers can gain administrative access by setting a specific cookie value. This is documented across multiple sources (NVD/NVD duplicate entries, PRION, CVELIST). The provide...

7.5CVSS7.4AI score0.02522EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2009/07/14 2:00 p.m.31 views

CVE-2008-6864

Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

7.2AI score0.02511EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2009/07/14 2:00 p.m.32 views

CVE-2008-6855

Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie...

7.2AI score0.02511EPSS
SaveExploits2References4
CVE
CVE
added 2009/07/14 2:00 p.m.59 views

CVE-2008-6864

CVE-2008-6864 affects Xigla Software Absolute Live Support .NET 5.1. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting a specific cookie value, effectively compromising session integrity. This is a client-side/authentication bypass issu...

7.5CVSS7.4AI score0.02511EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2009/07/14 2:00 p.m.53 views

CVE-2008-6856

The CVE-2008-6856 entry concerns Xigla Software Absolute News Manager.NET 5.1. According to the provided records, the vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a specific cookie value. The core issue is an authentication bypass via co...

7.5CVSS7.4AI score0.02537EPSS
SaveExploits2References4Affected Software1
Prion
Prion
added 2009/06/23 9:30 p.m.18 views

Path traversal

Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files via an encoded "/" slash in the file parameter...

5CVSS7.2AI score0.02747EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2009/06/23 9:30 p.m.3 views

CVE-2009-2180

Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via 1 a .. dot dot or 2 absolute path in the file parameter...

5CVSS5.7AI score0.06143EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2009/06/23 9:30 p.m.2 views

CVE-2009-2184

Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files via an encoded "/" slash in the file parameter...

5CVSS5.8AI score0.02747EPSS
SaveExploits1References6
CVE
CVE
added 2009/06/23 9:21 p.m.45 views

CVE-2009-2184

CVE-2009-2184 affects Gravy Media Photo Host 1.0.8, with an absolute path traversal vulnerability in forcedownload.php. The underlying issue allows remote attackers to read arbitrary files by supplying an encoded "/" in the file parameter. According to the NVD entry, the vulnerability has a Base ...

5CVSS6.9AI score0.02747EPSS
SaveExploits1References5Affected Software1
Prion
Prion
added 2009/06/22 8:30 p.m.16 views

Path traversal

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter...

5CVSS7.1AI score0.03195EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder