Default credentials

The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin account, which makes it easier for remote attackers to obtain access...

CVE-2008-6824

The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin account, which makes it easier for remote attackers to obtain access...

CVE-2008-6824

CVE-2008-6824 affects the A-LINK WL54AP3 and WL54AP2 access points where the management interface uses a blank default admin password. This allows remote attackers to obtain full access via a network attack. The NVD entry documents a base score of 10.0 (HIGH) with network, low complexity, and no ...

CVE-2009-1771

index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, which allows remote attackers to create or modify admin accounts via the 1 usersfullname, 2 usersemail, 3 usersroleid, 4 usersusername, and 5 userspassword parameters...

CVE-2009-1670

user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecified vectors. NOTE: some of these details are obtained from third party information...

Default credentials

Application Access Server A-A-S 2.0.48 has "wildbat" as its default password for the admin account, which makes it easier for remote attackers to obtain access...

TCPDB 3.8 - Arbitrary Add Admin Account

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :TCPDB version 3.8 Add Admin Exploit + Download : http://www.tcpdb.com/modules.php?name=Downloads&dop=viewdownload&cid=2...

Document Library 1.0.1 - Arbitrary Change Admin

Document Library 1.0.1 - Arbitrary Change Admin @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=Contry : Turkish @=======================================@ @=Script...

ShopEx 4.7.2 0day-vulnerability warning-the black bar safety net

Author: unknown I am nameless, and this time write a shopex4. 7. 2 vulnerability Has been notified of the official, today it is issued to, First syssite/shopadmin/orderservice. php background this document does not verify the identity of the user, It is important$vid parameter is not filtered...

win32 telnetbind by winexec 111 bytes

No description provided by source. ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services team & AT4RE Team ; more info: visit my blog http://datasniper.arab4services.net ; The Sh3llcode: ;...

win32 telnetbind by winexec 111 bytes

win32 telnetbind by winexec 111 bytes. Shellcode exploit for win32 platform ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services team & AT4RE Team ; more info: visit my blog http://datasniper.arab4services.net ; The...

win32 telnetbind by winexec 111 bytes

Exploit for win32 platform in category shellcode ===================================== win32 telnetbind by winexec 111 bytes ===================================== ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services...

Default Password (password) for 'admin' Account

The account 'admin' on the remote host has the password 'password'. An attacker may leverage this issue to gain access, likely as an administrator, to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "password";...

eZ Publish Privilege Escalation

= 3.5.6 Resolved in 3.9.5, 3.10.1, 4.0.1 More info: http://ez.no/developer/security/securityadvisories/ezpublish39/ezsa2008003insufficientformhandlingmadeprivilegeescalationpossible tested on version 3.9.0 usage: ./eZPublishprivilegeescalationexploit.php -u=username -p=password -e=email...

CVE-2008-5221

The accountsave action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and passwordretype parameters...

Authentication flaw

The accountsave action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and passwordretype parameters...

CVE-2008-5221

The accountsave action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and passwordretype parameters...

Natterchat 1.1 - Authentication Bypass

Natterchat 1.1 - Authentication Bypass + Script Name : NATTERCHAT v1.1 remote login bypass + Author : Bl@ckbe@rD 'Tunisian TerrorisT' + Contact : blackbeard-sqlA.Thotmail.fr ; + Dork : Powered by NATTERCHAT v 1.1 --//-- + Expl0iT : 1 Go to the Login page...

[waraxe-2008-SA#068] - Sql Injection in vBulletin 3.7.3.pl1

waraxe-2008-SA068 - Sql Injection in vBulletin 3.7.3.pl1 =============================================================================== Author: Janek Vind "waraxe" Date: 17. November 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-68.html Description of vulnerable software:...

E-topbiz Online Store 1 - Authentication Bypass

E-topbiz Online Store 1 - Authentication Bypass E-topbiz Online Store 1 Auth Bypass SQL Injection Vulnerability author: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : bIktIm a.q Exploit: username: realadminname ' or ' 1=1 password:...