Super Guestbook superguestconfig Admin Password Disclosure

Binary data 1564.prm...

Sun Java ASP Server Default Admin Password

Binary data 4575.prm...

edimaxBackdoor.txt

Vendor: Edimax Type: 7205APL Firmware: 2.40a-00 Kind of bug: Security Description: Normally a user called addmin, has to create a password on the Accesspoint. When you create a back-up of the settings of your Accesspoint, it will result in a config.bin file. Opening the file in Notepad gave the...

Edimax 7205APL

Vendor: Edimax Type: 7205APL Firmware: 2.40a-00 Kind of bug: Security Description: Normally a user called addmin, has to create a password on the Accesspoint. When you create a back-up of the settings of your Accesspoint, it will result in a config.bin file. Opening the file in Notepad gave the...

U.S. Robotics Broadband Router 8003 admin password visible

Hello. US Robotics Broadband Router 8003 is a small home/SOHO router which is configured using a HTML interface. This interface, as usual, asks for a password in order to let you view or change configuration parameters. But the password is checked first by a javascript function that just compares...

jportal.txt

Jportal is a portal system, quite commonly used: Google Results 1 - 10 of about 56,100 for "powered by jportal". 0.22 seconds Homepage: http://jportal2.com/ I've read its code and found: in module/print.inc.php: function artprint .... $query = "SELECT FROM $arttbl WHERE id=$id"; ... What to say? ...

JPortal SQL Injects

Jportal is a portal system, quite commonly used: Google Results 1 - 10 of about 56,100 for "powered by jportal". 0.22 seconds Homepage: http://jportal2.com/ I've read its code and found: in module/print.inc.php: function artprint .... $query = "SELECT FROM $arttbl WHERE id=$id"; ... What to say? ...

Samsung switches unauthorized access

Administrativ access without knowledge of admin password is possible...

CVE-2004-0266

Affects Php-Nuke 6.x to 7.1.0 where the SQL injection vulnerability is in the public_message capability (c_mid parameter) that can disclose the administrator password. Exploitation details or specific patches are not provided in the connected documents. The OpenVAS/Nessus references confirm long-...

OpenBB 1.06 SQL Injection

Hello bugtraq readers, A vulnerability exists in OpenBB 1.06 that could allow an attacker to manipulate SQL queries and obtain sensitive information from the database such as the administrator md5 password hash. This vulnerability exists because the index.php script of the application does not...

Множество уязвимостей в ChitChat Message Board

Множество уязвимостей в ChitChat Message Board Название скрипта: ChitChat Message Board Уязвимая версия: = v.2.8 Сайт производителя: http://www.cyber-cats.com/php Автор: Jaime Kartak Найдено: ziGGy Дата: 21st December 2003 ============ Introduction ============ ChitChat Message Board - симпатична...

GuppY 2.4 - Remote File Access

GuppY 2.4 - Remote File Access source: https://www.securityfocus.com/bid/8769/info GuppY is prone to an issue that could allow a remote attacker to read or write to files on the vulnerable server. This issue presents itself in the tinymsg.php component of the software. The attacker could only...

GuppY 2.4 - Remote File Access

source: https://www.securityfocus.com/bid/8769/info GuppY is prone to an issue that could allow a remote attacker to read or write to files on the vulnerable server. This issue presents itself in the tinymsg.php component of the software. The attacker could only access files to which the webserve...

Virginity Security Advisory 2003-001 : Hola CMS - Admin Password Disclosure by Include vulnerability

-------------------------------------------------------------------- Virginity Security Advisory 2003-001 - - - -------------------------------------------------------------------- DATE : 2003-08-13 03:11 GMT TYPE : remote VERSIONS AFFECTED : == hola-cms-1.2.9-10...

Information Disclosure Vulnerability in bitboard2

================================================ ------------------------------------------------ ------------www.bright-shadows.net------------ ------------------------------------------------ --------------theblacksheep&erik-------------- ------------------------------------------------...

[Full-Disclosure] Megabook 2.0 -XSS & UA execution

------------------------------------------------------------------ - EXPL-A-2003-011 exploitlabs.com Advisory 011 ------------------------------------------------------------------ -= MegaBook =- exploitlabs.com June 29, 2003 Vunerabilitys: ---------------- 1. XSS and Unchecked Input Length 2...

IRCXPro Default Admin Password

The remote web server is running IRCXPro. It is possible to connect to the management port of this service by default : 7100 by using the default login / password combination admin / password. An attacker may use this flaw to gain the control of this server. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2002-1934

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information...

PT-2002-2532 · D Link · D-Link Dwl-900Ap+ Access Point

Name of the Vulnerable Software and Affected Versions: D-Link DWL-900AP+ Access Point versions 2.1 through 2.2 Description: The issue allows remote attackers to access the TFTP server without authentication and read the config.img file. This file contains sensitive information, including the...

MySimpleNews (PHP)

Informations : °°°°°°°°°°°°°° Language : PHP Tested version : 1 Website : ? Comment : Very simple code. a Writing PHP code in a PHP file and execution of this code. Problem : °°°°°°°°° ----------------- users.php ----------------- ? $fp=fopen"news.php3","a"; fwrite$fp,"Post Par $LOGINn";...