CVE-2005-4764

BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service blocked admin logins...

CVE-2005-4775

Michael Scholz and Sebastian Stein Contineo 2.0, when the admin account lacks an e-mail address attribute, displays the password hash in a warning upon page reload, which might allow remote attackers to view the hash...

The use of xml+xsl to the client to add the super admin account-vulnerability warning-the black bar safety net

Usage: put swords. xml and swords. xsl is placed in an ordinary space, I believe very few people will pay attention to the xml security bar, quack, as long as you want to run the program added to run , the default support for js and vbs. This app was a user of swords, the password for the est of...

Special characters for penetration invasion decrypt-vulnerability warning-the black bar safety net

AnalysisServerof the web application, likethe forum, chat rooms, and found their programming bugs or omissions, so for 8 0 port the penetration of the invasion, it seems just a hacker program Master of things. In fact, although we will not write programs, but the use of the special structure of t...

WhatsUp Gold Default Admin Account

This WhatsUp Gold server still has the default password for the admin user account. An attacker can use this account to probe other systems on the network and obtain sensitive information about the monitored systems. OpenVAS Vulnerability Test $Id: DDIWhatsUpDefault.nasl 8023 2017-12-07 08:36:26Z...

WhatsUp Gold Default Admin Account (HTTP)

This WhatsUp Gold server still has the default password for the admin user account. An attacker can use this account to probe other systems on the network and obtain sensitive information about the monitored systems. SPDX-FileCopyrightText: 2001 HD Moore / Digital Defense Inc. Some text...

MailGust 1.9 SQL Injection

MailGust 1.9 SQL injection / board takevor software: site: http://www.mailgust.org/ description: Mailgust is three softwares in one: Mailing list manager Newsletter distribution tool Message Board Mailgust is written in php and uses a mysql database. vulnerability: if magic quotes off - SQL...

several vulnerabilities present in Belkin wireless routers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory name: several vulnerabilities present in Belkin wireless routers Overall severity rating: HIGH risk Devices affected: "belkin54g" family of wireless routers 4 main vulnerabilities are included in this advisory: - - default telnet backdoor - -...

Belkin wireless routers multiple vulnerabilities

Default admin account with no password, passwords in cleartext...

[Full-disclosure] Advisory 06/2005: Geeklog SQL Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Geeklog SQL Injection Vulnerability Release Date: 2005/07/05 Last Modified: 2005/07/05 Author: Stefan Esser [email protected] Application: Geeklog = 1.3.11 Severity: An...

CVE-2002-1867

The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to 1 admin/setup.cgi, which allows remote attackers to create an administrative account, or 2 admin/nph-build.cgi, which allows remote attackers to cause a denial of service CPU consumption...

CVE-2005-2027

Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry...

cuteNewsExec.txt

There is a vulnerability in the latest and to the best of my knowledge, all prior versions of CuteNews from CutePHP.com. CuteNews does not properly sanitize user input when an administrative account edits the template files. CuteNews takes HTML code from a web form and outputs it to a template fi...

CVE-2005-2027

Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry...

CVE-2004-1932

This CVE (CVE-2004-1932) affects PHP-Nuke 6.x through 7.2, with a SQL injection in auth.php and admin.php. The underlying flaw allows remote attackers to inject SQL and create an administrator account via base64-encoded SQL in the admin parameter. The connected sources confirm the vulnerable comp...

[Full-disclosure] TowerBlog <= 0.6 Admin Account View [x0n3-h4ck]

-=--------------------ADVISORY-------------------=- -= =- -= TowerBlog = 0.6 =- -= =- -= Author: CorryL x0n3-h4ck.org =- -= =- -=-----------------------------------------------------=- -=+ Application: TowerBlog -=+ Version: 0.6 -=+ Vendor's URL: http://tower.hybryd.org/?x=home -=+ Platform:...

CVE-2005-0267

CVE-2005-0267 affects FlatNuke 2.5.1. The vulnerability lies in the url_avatar field of index.php, where specially crafted input containing carriage returns (CR) and line feeds (LF) is interpreted as a sensitive directive, allowing remote attackers to create an administrator account. Some sources...

PHP-Nuke 7.4 - Admin

/ old exploit but what pretty code /str0ke / / phpNUKE v7.4 exploit this exploit create new admin with relative passwd that you specified on parameter of exploit you take administrative control of the webPortal Reverences: http://www.osvdb.org/9563 coded by: Silentium of Anacron Group Italy date:...

Icecast <= 2.0.1 Win32 Remote Code Execution Exploit (modded)

Exploit for unknown platform in category remote exploits ============================================================= Icecast include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include include endif define VER "0.1" define PORT 80...

[XSS] PHP-Nuke 7.4 ViewAdmin Bug

CODEBUG Labs Advisory 3 Title: ViewAdmin Bug Author: Pierquinto 'Mantra' Manco Product: PHP-Nuke 7.4 Type: XSS Web: http://www.mantralab.org View Admin Bug - Description PHP-Nuke is a very bugged web CMS, version 7.4 has critical XSS bug that permit to an attacker to view Admin account aid and to...