Default credentials

The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access...

CVE-2007-6709

The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access...

wpdmsguest-multi.txt

Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities by NBBN 2nd, February 2008 1 File Disclosure Open the following url you can see the config data of wordpress, with the mysql-server username and password. In this file you usually have write permission, so an attacker can place h...

Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities

No description provided by source. Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities by NBBN 2nd, February 2008 1 File Disclosure Open the following url you can see the config data of wordpress, with the mysql-server username and password. In this file you usually have write...

WordPress Plugin dmsguestbook 1.7.0 - Multiple Vulnerabilities

WordPress Plugin dmsguestbook 1.7.0 - Multiple Vulnerabilities Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities by NBBN 2nd, February 2008 1 File Disclosure Open the following url you can see the config data of wordpress, with the mysql-server username and password. In this fil...

BookmarkX script 2007 - topicid SQL Injection

BookmarkX script 2007 - topicid SQL Injection BookmarkX scriptPowered by GengoliaWebStudioSQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : "2007 BookmarkX script" DORKS 2 : Powered by GengoliaWebStudio DORK 3 : allinurl :"index.php?menu=showtopic" EXPLOIT :...

Debian: Security Advisory (DSA-884-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5835

Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service overwritten files and possibly obtain administrative access...

[Full-disclosure] Ipswitch FTP XSS leads to FTP server compromise

VDA Labs Advisory: -------------------------- Ipswitch FTP XSS leads to FTP server compromise. The Vendor has been notified, and given the PoC. Synopsis: ------------ There is XSS vulnerability when the WSFTP server logs client FTP commands. All user commands are logged. When the FTP command is...

CVE-2007-4555

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

Cross site scripting

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

CVE-2007-4555

CVE-2007-4555 describes a cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP's administration interface. The issue occurs when arguments to a valid command are not properly sanitized and are displayed by the view log option, enabling an attacker to inject arbitrary web script or HTML. Th...

TS-2007-003-0: BlueCat Networks Adonis CLI root privilege escalation

Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis CLI root privilege escalation Date: 2007-08-16 Advisory ID: TS-2007-003-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details Impact...

TS-2007-003-0.txt

Template Security Security Advisory ----------------------------------- BlueCat Networks Adonis CLI root privilege escalation Date: 2007-08-16 Advisory ID: TS-2007-003-0 Vendor: BlueCat Networks, http://www.bluecatnetworks.com/ Revision: 0 Contents -------- Summary Software Version Details Impact...

CVE-2007-4260

CVE-2007-4260 affects EZPhotoSales 1.9.3 and earlier, where a default hard-coded or easily guessed admin username enables remote access to arbitrary galleries by specifying the username. The vulnerability stems from inadequate access controls around the gallery browsing component, permitting an a...

Design/Logic Flaw

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file...

Kerberos 1.5.1 Kadmind Remote Root Buffer Overflow Vulnerability

Exploit for linux platform in category remote exploits ================================================================ Kerberos 1.5.1 Kadmind Remote Root Buffer Overflow Vulnerability ================================================================ Kerberos Version 1.5.1 Kadmind Remote Root Buff...

Code injection

admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified adminmail, login, and pass parameters...

CVE-2007-1553

admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified adminmail, login, and pass parameters...

CVE-2007-1553

The CVE-2007-1553 issue affects Guestbara 1.2 and earlier, where admin/configuration.php accepts a crafted zapis="ok" request along with modified admin_mail, login, and pass parameters to remotely modify the admin account’s email, name, and password. This indicates an input-validation/parameter-h...