30 matches found
CVE-2023-35779
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Seed Webs Seed Fonts plugin = 2.3.1 versions...
PT-2023-16750 · Netapp · Snapcenter
Name of the Vulnerable Software and Affected Versions: SnapCenter versions 4.7 prior to 4.7P2 SnapCenter versions 4.8 prior to 4.8P1 Description: The issue allows a remote unauthenticated attacker to gain access as an admin user. Recommendations: For SnapCenter versions 4.7 prior to 4.7P2, update...
Design/Logic Flaw
D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetMasterWLanSettings with shell metacharacters to /squashfs-root/www/HNAP1/control/SetMasterWLanSettings.php...
X10Media Mp3 Search Engine < 1.6.2 Admin Access Vulnerability
Exploit for unknown platform in category web applications ============================================================= X10Media Mp3 Search Engine isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so display all forms. / ---------------------------------------- if the...
OTManager CMS 2.4 - Insecure Cookie Handling
OTManager CMS 2.4 - Insecure Cookie Handling ...:::::OTManager CMS v2.4 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virang...
Comersus Default Install Script Admin Access
Binary data 2554.prm...
Admin Access Vulnerability in Community Wizard
Admin Access Vulnerability in Community Wizard Affected Systems: Community Wizard version: 5.1 and possibly earlier versions Vendor: http://www.sepcity.com , http://www.commwiz.com Issue: gain admin access Released: 18 September 2003 Introduction: ============= "Community Wizard allows anyone to...
bandwebsite.txt
Informations : °°°°°°°°°°°°°° - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : Jelle de Vos - Tested version :1.5 - Problem : vulnerability in Bandsite Allows Gaining Admin Access. Product Description : °°°°°°°°°°°°°°°°°°°°° Bandsite is an...
pnews.txt
Admin Access Vulnerability in P-News 1.6 Url: http://www.ppopn.net It is possible to gain admin access if you possess a 'Member' account due to a flaw in the 'p-news.php' file. You can inject an entire arbitrary account, including all the fields, into the 'Name' field, which will push all the...