SQL-инъекция в phpAdsNew

--------------------------------------------------------- SQL-инъекция в phpAdsNew --------------------------------------------------------- Автор: Григоров Роман Дата: Январь 13, 2005 e-mail: roman at mosk dot ru Icq: 157535663 --------------------------------------------------------- Уязвимый...

Zen Cart login.php SQL Injection Vulnerability

Overview: "Zen Cart™ truly is the art of e-commerce; a free, user-friendly, open source shopping cart system." Description: An input validation vulnerability has been reported in Zen Cart, allowing a remote user to inject SQL commands. The '/admin/login.php' file does not properly validate...

not_so_smartether.txt

There is a vulnerability within the OS that this and other samsung managed switches. The problem resides in the way that the admin user is authenticated when trying to login using telnet remote or from console local. Now just so everyone who reads this knows, I am not that up to date on all of...

XtremeASP PhotoGallery 2.0 - 'Adminlogin.asp' SQL Injection

source: https://www.securityfocus.com/bid/9438/info XtremeASP PhotoGallery is prone to an SQL injection vulnerability. The issue is reported to exist in the administration login interface, which does not sufficiently sanitize user-supplied input for username and password values before including i...

Несколько уязвимостей в Sad Raven's Guestbook

Несколько уязвимостей в Sad Raven's Guestbook Программа: Sad Raven's Guestbook Сайт производителя: www.sad-raven.ru Уязвимая версия: 1.1 Опасность: низкая Найдено: MORPFEY Наличие эксплоита: Да Дата: 20.12.2003 Описание: В гостевой книге возможно отвечать от имени Администратора. Экплоит: В поле...

CVE-2003-0049

CVE-2003-0049 involves AFP in Mac OS X before 10.2.4. The flaw allows an administrator to log in as another user by authenticating with the administrator password. The impact is elevated access to other user accounts as described in the public records. Remediation is to apply the Apple fix in Mac...

security flaw

Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via 1 the admin login page, or 2 the Pipermail index summaries...

CVE-2002-0388

Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via 1 the admin login page, or 2 the Pipermail index summaries...

security flaw

Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via 1 the admin login page, or 2 the Pipermail index summaries...

CVE-2002-0388

Removed by vendor...

d-link.di-701.txt

D-Link DI-701 Residential Gateway's Admin login available on external port As part of our company's evaultion of security products for our use, I discovered a serious flaw in the D-Link DI-701 Residential Gateway. This box is touted as a personal firewall to protect home users cable modems from...

anyboard.forum.passwd.txt

Date: Sat, 24 Apr 1999 03:55:39 +0200 From: "Bluefish @ home" To: [email protected] Subject: Anyboard www.netbula.com problem's publicly discussed in eurohack Draz Q published a short summary of problems with a webrelated software in eurohack. Basicly it sounds pretty much like a common CGI...