4081 matches found
CVE-2005-2596
CVE-2005-2596 concerns a programming error in the Gallery component used with Postnuke that allows any user with Admin privileges to access all galleries. Open-source advisories and Debian security notes describe a remote-attack surface stemming from a bug in the gallery code that grants full gal...
CVE-2005-2596
User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries...
CVE-2005-2596
User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries...
Gallery PostNuke Integration Access Validation Privilege Escalation
The remote host is running Gallery, a web-based photo album. According to its banner, the version of Gallery installed on the remote host is subject to an access validation issue when integrated with PostNuke, as is the case on the remote host. The issue means that any user with any level of admi...
CVE-2002-2046
CVE-2002-2046 affects X-News (x_news) 1.1 and earlier. The flaw allows remote attackers to gain administrative privileges by stealing and replaying the md5_password cookie. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, and no authenticati...
FreeBSD : Open DC Hub -- remote buffer overflow vulnerability (cdf14b68-3ff9-11d9-8405-00065be4b5b6)
Donato Ferrante reported an exploitable buffer overflow in this software package. Any user that can login with 'admin' privileges can abuse it, trough the $RedirectAll command, to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...
Ipswitch WhatsUp Professional 2005 SP1 - 'login.asp' SQL Injection
source: https://www.securityfocus.com/bid/14039/info WhatsUp Professional is prone to an SQL injection vulnerability affecting its Web-based front end. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL...
[SA15600] YaPiG Multiple Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2005-0614
sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie...
[HSC Security Group] Comersus v6 Script injection
Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Title: Comersus v6 Shopping Cart Sever Script injection Risk: High Comersus is one of the most used Shopping Cart software written in asp, available for nix and windows platforms. A critical script injection can...
comersusv6.txt
--Alt-Boundary-27163.23868601 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Title: Comersus v6 Shopping Cart Sever Script injection Risk: High...
CVE-2004-1760
The CVE-2004-1760 entry covers unauthenticated remote admin access on Cisco voice products running the IBM Director Agent on IBM servers before OS 2000.2.6. The vulnerability allows an attacker to gain administrator privileges by connecting to TCP port 14247. The description specifies the affecte...
CVE-2004-0913
CVE-2004-0913 concerns ecartis 0.x < 0.129a+1.0.0-snap20020514-1.3 and 1.x
paNews 2.0b4 Remote Admin Creation SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== paNews 2.0b4 Remote Admin Creation SQL Injection Exploit ======================================================== / paNews v2.0b4 silePNEWSxpl This exploit utilize SQL injection for...
XGB 2.0 - Authentication Bypass
source: https://www.securityfocus.com/bid/12489/info xGB is reportedly affected by a vulnerability that could permit unauthorized administrator access. This issue is due to the application failing to properly verify user credentials. A malicious user could exploit this vulnerability to bypass use...
PT-2004-2741 · Php Nuke · Php-Nuke
Name of the Vulnerable Software and Affected Versions: Php-Nuke versions 6.x through 7.1.0 Description: A cross-site request forgery issue allows remote attackers to gain administrative privileges. This can be achieved via an img tag with a URL to "admin.php". Recommendations: For Php-Nuke versio...
Open DC Hub -- remote buffer overflow vulnerability
Donato Ferrante reported an exploitable buffer overflow in this software package. Any user that can login with 'admin' privileges can abuse it, trough the $RedirectAll command, to execute arbitrary code...
[Full-Disclosure] Buffer Overflow in Open Dc Hub 0.7.14
Donato Ferrante Application: Open Dc Hub http://opendchub.sourceforge.net/ Version: 0.7.14 Bug: Buffer Overflow Date: 24-Nov-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...
CVE-2002-1447
The CVE-2002-1447 issue affects the UNIX VPN Client’s vpnclient executable. A buffer overflow is triggered by a long profile name in the connect argument, allowing local users to obtain administrative privileges. Affected product/version is VPN Client prior to 3.5.2. Remediation: upgrade to versi...