Hosting Controller <= 6.1 Hotfix 3.1 Authenticated User Privilege Escalation

According to its version number, the installation of Hosting Controller on the remote host enables any authenticated user to gain host admin privileges and view all his resellers and change their passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-2006-2890

Pixelpost 1-5rc1-2 and earlier are affected when register_globals is enabled. An attacker can set _SESSION["pixelpost_admin"] = 1 in admin scripts (e.g., admin/view_info.php) to gain administrator privileges and perform other attacks. No explicit remediation is provided in the provided documents.

CVE-2006-2635

Multiple cross-site scripting XSS vulnerabilities in Tikiwiki aka Tiki CMS/Groupware 1.9.x allow remote attackers to inject arbitrary web script or HTML via malformed nested HTML tags such as "ipt" in 1 offset and 2 days parameters in a tiki-lastchanges.php, the 3 find and 4 offset parameters in ...

CVE-2006-2635

Multiple cross-site scripting XSS vulnerabilities in Tikiwiki aka Tiki CMS/Groupware 1.9.x allow remote attackers to inject arbitrary web script or HTML via malformed nested HTML tags such as "ipt" in 1 offset and 2 days parameters in a tiki-lastchanges.php, the 3 find and 4 offset parameters in ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Tikiwiki aka Tiki CMS/Groupware 1.9.x allow remote attackers to inject arbitrary web script or HTML via malformed nested HTML tags such as "ipt" in 1 offset and 2 days parameters in a tiki-lastchanges.php, the 3 find and 4 offset parameters in ...

e107072.txt

Software: e107 CMS Versions: list$uid, $upw=$COOKIE$pref'cookiename' ? explode".", $COOKIE$pref'cookiename' : explode".", $SESSION$pref'cookiename'; ..... if$result = getuserdata$uid, "AND md5u.userpassword='$upw'", FALSE ..... Exploit: 0.6.xxx 1.blablahashpassword' union select from e107user whe...

Design/Logic Flaw

PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and view and configure log files, via a direct request to the 1 admin.php or 2 settings.php page...

Authentication flaw

CodeMunkyX aka free-php.net Simple Poll 1.0, when authentication is not required for the admin directory, allows remote attackers to gain administrative privileges by appending /admin/ to the top-level URI of the application...

CVE-2006-2235

CodeMunkyX aka free-php.net Simple Poll 1.0, when authentication is not required for the admin directory, allows remote attackers to gain administrative privileges by appending /admin/ to the top-level URI of the application...

CVE-2006-2235

CVE-2006-2235 affects CodeMunkyX (free-php.net) Simple Poll 1.0. The root cause is missing authentication for the admin directory, allowing remote attackers to gain administrative privileges by appending "/admin/" to the top-level URI. The vulnerability is network-exploitable with high complexity...

CVE-2006-2116

planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/galleryadmin.php...

CVE-2006-2116

CVE-2006-2116 concerns the planetGallery application. The vulnerability allows remote attackers to gain administrator privileges via a direct request to the file admin/gallery_admin.php. The available connected documents confirm planetGallery as the affected product and the specific administrativ...

CVE-2006-0230

Symantec Scan Engine 5.0.0.24 (and possibly earlier 5.0.x) is affected by an authentication design flaw that trusts the client-side applet to verify passwords. An unauthenticated remote attacker can gain administrative privileges by sending crafted XML requests to the server, effectively bypassin...

[Full-disclosure] Cisco Security Advisory: Multiple Vulnerabilities in the WLSE Appliance

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in the WLSE Appliance Advisory ID: cisco-sa-20060419-wlse http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml Revision 1.0 For Public Release 2006 April 19 1500 UTC GMT -...

The use of ASP Trojan horse to enhance the highest authority-vulnerability warning-the black bar safety net

| --- Some time ago the proliferation of dynamic network Forum upload vulnerability and the recent spate of a variety of asp systems exposed upload vulnerability, may be a lot of friends hands with a lot of webshell broiler, as choose how these Chicks are also vary from person to person, someone ...

CVE-2006-0367

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."...

CVE-2006-0367

CVE-2006-0367 affects Cisco CallManager up to versions 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2. The issue is a privilege-escalation vulnerability where remote authenticated users with read-only administrative privileges can obtain full admin privile...

CVE-2005-4453

UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original 1 pUseruserid and 2 Useruserid parameters to UserProfile.aspx, then modifying the password field...

CVE-2005-4453

CVE-2005-4453 concerns Ultraapps Issue Manager prior to 2.1. A remote authenticated user can gain administrator privileges by tampering with parameters in UserProfile.aspx (p_User_user_id and User_user_id) and then modifying the password field. No patch or remediation details are provided in the ...

CVE-2005-3555

Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the 1 editattributes or 2 admin page...