319 matches found
Gallery PostNuke Integration Access Validation Privilege Escalation
The remote host is running Gallery, a web-based photo album. According to its banner, the version of Gallery installed on the remote host is subject to an access validation issue when integrated with PostNuke, as is the case on the remote host. The issue means that any user with any level of admi...
Gravity Board X 1.1 - CSS Template Unauthorized Access
source: https://www.securityfocus.com/bid/14502/info Gravity Board X GBX is affected by an unauthorized access vulnerability. This issue is due to a failure in the application to perform proper access validation before granting access to privileged functions. An attacker can exploit this...
Clever Copy 2.0 - Private Message Unauthorized Access
Clever Copy 2.0 - Private Message Unauthorized Access source: https://www.securityfocus.com/bid/14397/info Clever Copy is affected by an unauthorized access vulnerability. This issue is due to a failure in the application to perform proper access validation checks before granting access to privat...
Clever Copy 2.0 - Private Message Unauthorized Access
source: https://www.securityfocus.com/bid/14397/info Clever Copy is affected by an unauthorized access vulnerability. This issue is due to a failure in the application to perform proper access validation checks before granting access to private message functions. An attacker can exploit this...
PAFaq beta4 - Database Unauthorized Access
PAFaq beta4 - Database Unauthorized Access source: https://www.securityfocus.com/bid/13999/info paFaq is prone to an unauthorized access vulnerability regarding the database. This issue is a result of the application failing to perform access validation on the 'backup.php' script. A remote...
ignitionServer < 0.3.6-P1 Multiple Vulnerabilities
The remote host is running a version of the IgnitionServer IRC service which contains a bug in the way it handles locked channels, as well as a design error regarding the access validation checks. An attacker may use this flaw to block an IRC operator out of a protected channel. A host may use th...
GeoVision Digital Surveillance System 6.0 46.1 - Unauthorized .JPEG Image Access
GeoVision Digital Surveillance System 6.0 46.1 - Unauthorized .JPEG Image Access source: https://www.securityfocus.com/bid/13571/info GeoVision Digital Surveillance System is prone to a vulnerability that allows remote unauthorized attackers to view JPEG images stored on a server. This issue...
Keyvan1 ImageGallery - Database Disclosure
source: https://www.securityfocus.com/bid/13630/info Keyvan1 ImageGallery is prone to an access validation vulnerability that could allow the underlying database to be downloaded. http://www.example.com/path/image.mdb...
Microsoft Windows Kernel Access Validation Request Buffer Overflow Vulnerability
Description The Microsoft Windows kernel is prone to a buffer overflow in the system that validates access requests. Successful exploits could allow arbitrary code to run in the context of the kernel. Only local users can exploit this vulnerability. Technologies Affected Microsoft Windows 2000...
Logics Software LOG-FT - Arbitrary File Disclosure
Logics Software LOG-FT - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is...
Logics Software LOG-FT - Arbitrary File Disclosure
source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an attacker can simply issue a specially...
PhotoPost PHP < 5.0.1 Multiple Remote Vulnerabilities
According to its banner, the version of PhotoPost PHP installed on the remote host has several vulnerabilities: - An Access Validation Vulnerability. The 'adm-photo.php' script fails to verify authentication credentials, which allows an attacker to change the properties of thumbnails of uploaded...
All Enthusiast PhotoPost PHP Pro 5.0 - adm-photo.php Arbitrary Image Manipulation
All Enthusiast PhotoPost PHP Pro 5.0 - adm-photo.php Arbitrary Image Manipulation source: https://www.securityfocus.com/bid/12779/info PhotoPost PHP Pro is a web-based image gallery application written in PHP. It can be implemented on any platform that supports PHP script execution. Multiple remo...
All Enthusiast PhotoPost PHP Pro 5.0 - 'adm-photo.php' Arbitrary Image Manipulation
source: https://www.securityfocus.com/bid/12779/info PhotoPost PHP Pro is a web-based image gallery application written in PHP. It can be implemented on any platform that supports PHP script execution. Multiple remote vulnerabilities affect All Enthusiast PhotoPost PHP Pro. These issues are due t...
PhotoPost Multiple Vulnerabilities
Binary data 2694.prm...
NewsScript newsscript.pl mode Parameter Privilege Escalation
The remote host is running a version of NewsScript.co.uk's NewsScript that allows a remote attacker to bypass authentication simply by setting the 'mode' parameter to 'admin', thereby allowing him to add, delete, or modify news stories and headlines at will. %NASLMINLEVEL 70300 C Tenable Network...
PE Multiple Remote Access Validation Vulnerabilities (Participate Systems Inc. / Outstart Inc.)
-------------------------------------------------------- - Multiple Remote Access Validation Vulnerabilities - With PE community software -------------------------------------------------------- Altrus::security.honour.ca Program name: PE Versions affected: unknown Vendors: Outstart Inc...
CVE-2005-0685
Multiple access validation errors in OutStart Participate Enterprise PE allow remote attackers to 1 browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, 2 rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, 3...
CVE-2005-0685
CVE-2005-0685 : Multiple access validation errors in OutStart Participate Enterprise (PE) allow remote attackers to perform unauthorized actions by manipulating parameters such as rootFolder, selectedObject, and selectedObjectsCSV across various views/commands (displaynavigator.jsp, renamepopup.j...
CVE-2005-0685
Multiple access validation errors in OutStart Participate Enterprise PE allow remote attackers to 1 browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, 2 rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, 3...