2943 matches found
Authentication flaw
The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...
CVE-2009-4851
XOOPS Profiles Module vulnerability (pre-2.4.1) allows remote attackers to bypass administrative approval via activation resend: activation codes are sent in response to arbitrary activation requests (activate.php). Affects XOOPS Profiles Module; root cause is improper handling of activation requ...
CVE-2009-4851
The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...
Comptel Provisioning and Activation - 'index.jsp?error_msg_parameter' Cross-Site Scripting
source: https://www.securityfocus.com/bid/38534/info Comptel Provisioning and Activation is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...
Comptel Provisioning and Activation - index.jsp?error_msg_parameter Cross-Site Scripting
Comptel Provisioning and Activation - index.jsp?errormsgparameter Cross-Site Scripting source: https://www.securityfocus.com/bid/38534/info Comptel Provisioning and Activation is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. ...
Comptel InstantLink Cross Site Scripting
-------------------------------------------------------------------- Exploit Title: Comptel InstantLink" XSS vulnerability Date: 24 Feb 2010 Author: thebluegenius Software Link: http://www.comptel.com/ProvisioningActivation/ Version: All CVE : NA --------------------------------------------------...
Comptel InstantLink XSS vulnerability
Exploit for unknown platform in category web applications ===================================== Comptel InstantLink XSS vulnerability ===================================== -------------------------------------------------------------------- Exploit Title: Comptel InstantLink" XSS vulnerability...
CVE-2009-4641
gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...
CVE-2009-4641
gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...
CVE-2009-4641: Undefined Security Weakness
gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...
CVE-2009-4641
gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...
New Ransomware Blocks Internet Access
Security researchers have stumbled upon a new piece of ransomware that blocks an infected computer from accessing the Internet until a fee is paid via SMS text message. The latest ransomware file is bundled with a program called uFast Download Manager. Once a machine is infected, a message is...
Security fix for the ALT Linux 10 package gnutls30 version 2.6.6-alt1
April 30, 2009 Afanasov Dmitry 2.6.6-alt1 - 2.6.6 release. + fix Corrected double free on signature verification failure CVE-2009-1415 + fix DSA key generation CVE-2009-1416 + fix gnutls-cli expiration/activation time check CVE-2009-1417 - release fixes 19873 also...
Conficker activation passes quietly, but threat isn't over
By Sumner Lemon, IDG News Service An expected activation of the Conficker.c worm at midnight today passed without incident computerworld.com, despite sensationalized fears cbsnews.com that the Internet itself might be affected, but security researchers said users aren’t out of the woods yet. Whil...
Design/Logic Flaw
Unspecified vulnerability in phpns before 2.1.3 has unknown impact and attack vectors related to "activation permissions."...
CVE-2008-6546
Unspecified vulnerability in phpns before 2.1.3 has unknown impact and attack vectors related to "activation permissions."...
CVE-2008-6546
Unspecified vulnerability in phpns before 2.1.3 has unknown impact and attack vectors related to "activation permissions."...
CVE-2008-6546
CVE-2008-6546 concerns phpns before 2.1.3 with a vulnerability related to activation permissions. The connected documents confirm the affected software and version but do not specify the underlying root cause, concrete impact, or exploitation details. The description consistently notes unknown im...