2982 matches found
CVE-2007-6487: Undefined Security Weakness
Unspecified vulnerability in Plain Black WebGUI 7.4.0 through 7.4.17 allows remote authenticated users with Secondary Admin privileges to create Admin accounts, a different vulnerability than CVE-2006-0680...
CVE-2007-5835
Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service overwritten files and possibly obtain administrative access...
[Full-disclosure] Ipswitch FTP XSS leads to FTP server compromise
VDA Labs Advisory: -------------------------- Ipswitch FTP XSS leads to FTP server compromise. The Vendor has been notified, and given the PoC. Synopsis: ------------ There is XSS vulnerability when the WSFTP server logs client FTP commands. All user commands are logged. When the FTP command is...
Cross site scripting
Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...
CVE-2007-4555
Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...
CVE-2007-4555
CVE-2007-4555 describes a cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP's administration interface. The issue occurs when arguments to a valid command are not properly sanitized and are displayed by the view log option, enabling an attacker to inject arbitrary web script or HTML. Th...
CVE-2007-4555: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...
TS-2007-003-0.txt
Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis CLI root privilege escalation Date: 2007-08-16 Advisory ID: TS-2007-003-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details Impact...
TS-2007-003-0: BlueCat Networks Adonis CLI root privilege escalation
Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis CLI root privilege escalation Date: 2007-08-16 Advisory ID: TS-2007-003-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details Impact...
CVE-2007-4260
CVE-2007-4260 affects EZPhotoSales 1.9.3 and earlier, where a default hard-coded or easily guessed admin username enables remote access to arbitrary galleries by specifying the username. The vulnerability stems from inadequate access controls around the gallery browsing component, permitting an a...
Design/Logic Flaw
PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file...
Kerberos 1.5.1 Kadmind Remote Root Buffer Overflow Vulnerability
Exploit for linux platform in category remote exploits ================================================================ Kerberos 1.5.1 Kadmind Remote Root Buffer Overflow Vulnerability ================================================================ Kerberos Version 1.5.1 Kadmind Remote Root Buff...
CVE-2007-1553
admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified adminmail, login, and pass parameters...
Code injection
admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified adminmail, login, and pass parameters...
CVE-2007-1553
admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified adminmail, login, and pass parameters...
CVE-2007-1553
The CVE-2007-1553 issue affects Guestbara 1.2 and earlier, where admin/configuration.php accepts a crafted zapis="ok" request along with modified admin_mail, login, and pass parameters to remotely modify the admin account’s email, name, and password. This indicates an input-validation/parameter-h...
CVE-2007-1480
CVE-2007-1480 affects Creative Guestbook 1.0. An unauthenticated remote attacker can issue a direct request to createadmin.php with Name, Email, and PASSWORD parameters to create an administrative account. This is the underlying vulnerability described in multiple sources, including the NVD entry...
CVE-2007-0049
Geckovich TaskTracker Pro 1.5 and earlier is affected by CVE-2007-0049. The vulnerability allows remote attackers to add administrative or other accounts by sending a direct request to Customize.asp with a modified GroupID in the Add action. The described impact is the ability to create extra acc...
CVE-2006-6888
P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for db/user.dat...