2974 matches found
CVE-2002-1934
CVE-2002-1934 affects Pingtel xpressa SIP-based VoIP phones version 1.2.5 through 2.0.1. The vulnerability leaks sensitive information during boot-up, allowing an attacker to obtain the MD5 hashes of the Admin password, the physical password, and other registration data. The available connected s...
CVE-2002-1934
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information...
CVE-2002-1934: Undefined Security Weakness
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information...
cacti -- multiple vulnerabilities
Stefan Esser reports: Wrongly implemented user input filters lead to multiple SQL Injection vulnerabilities which can lead f.e. to disclosure of the admin password hash. Wrongly implemented user input filters allows injection of user input into executed commandline. Alberto Trivero posted his...
myBloggie 2.1.1 - 2.1.2 SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w SQL Injection Exploit for myBloggie 2.1.1 - 2.1.2 This exploit show the username of the administrator of the blog and his password crypted in MD5 Related advisories: Italian...
phpStat 1.5 - setup.php Authentication Bypass (PHP) (2)
phpStat 1.5 - setup.php Authentication Bypass PHP 2 ? / PHP Stat Administrative User Authentication Bypass POC Exploit Code by Nikyt0x - Soulblack Security Research Advisory: http://www.soulblack.com.ar/repo/papers/phpstatadvisory.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal...
phpStat <= 1.5 (setup.php) Authentication Bypass Exploit (perl)
Exploit for unknown platform in category web applications =============================================================== phpStat mhp0rtal , Oilkarchack , Str0ke & AlphaST.Com So Iranian Hacking & Security Teams : Crouz , Shabgard , Simorgh-ev ,IHS , Emperor & GrayHatz.NeT use IO::Socket; if @ARG...
Hosting Controller 0.6.1 - User Registration (3)
Hosting Controller 0.6.1 - User Registration 3 Username : emailaddress : firstname : milw0rm.com 2005-05-27...
CVE-2004-2024
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via passwordforgotten.php...
CVE-2004-2024: Undefined Security Weakness
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via passwordforgotten.php...
PHP-Nuke 6.x 7.6 Top module - SQL Injection
PHP-Nuke 6.x 7.6 Top module - SQL Injection /bin/bash This is just basic-ly modules.php?name=Top&querylang=union%20select%200,pwd,0,0%20from%20nukeauthors%20where%20radminsuper=1 works thou /str0ke PHPNuke Top Module Remote SQL Injection by Fabrizi Andrea 2005 andrea.fabrizi at gmail.com Work wit...
CVE-2005-0640
Computer Associates CA Unicenter Asset Management UAM 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods...
CVE-2005-0640: Undefined Security Weakness
Computer Associates CA Unicenter Asset Management UAM 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods...
CVE-2005-0640
Computer Associates CA Unicenter Asset Management UAM 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods...
ACNS Denial of Service and Default Admin Password Vulnerabilities
...
DCP-Portal Multiple Scripts SQL Injection
The remote host is running DCP-Portal, a content management system powered by PHP. The version of DCP-Portal installed on the remote host fails to sanitize user-supplied input to many of its parameters before using it, either in database queries or dynamic web page generation. An attacker may be...
mybbSQL.txt
Description: MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. MyBB has been designed with the end users in mind, you and your subscribers. Full control over your discussion system is presented right at the tip of your fingers, from multiple styles and themes to the...
[Full-Disclosure] Webroot Spy Sweeper Enterprise Adminpassord open to the world
Not sure if this list is the right place for this....... Spy Sweeper Enterprise from webroot http://www.webroot.com/products/spysweeper/enterprise/ leaves the admin password in plain site you can find it by going to HKEYLOCALMACHINESOFTWAREWebrootEnterpriseSpy Sweeperap This can be done from the...