X.Org server fails to properly test for effective user ID

Overview A vulnerability in the X.Org server could allow a local attacker to gain administrative privileges or cause a denial of service on an affected system. Description The X.Org server program provides several command-line options that are meant to be parsed only when the program is running a...

Netious CMS <= 0.4 SQL Injection and Session Management Vulnerabilities

-------------------------------------------------------------------------------- -- -- -- Jacek Wlodarczyk j4ck - jacekwloatgmaildotcom -- -- -- -------------------------------------------------------------------------------- --Title: Netious CMS = 0.4 SQL Injection and Session Management...

rps-include.txt

Advisory 13 Title: Multiple Vulnerabilities RPS rigter portal system Author: 0ozeuso0 Arturo Z. Contact: [email protected] Website: www.elitemexico.org Date: 18/07/06 Risk: medium Vendor Url: http://rps.rigtersir.com/ Affected Software: RPS Non Affected: RPS V 4 Info: UPLOAD FILES it allows th...

[KAPDA::#52] - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability

KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability KAPDA New advisory Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23, 2005 Vendor Contacted: Jun 01, 2006...

Cisco Security Monitoring Analysis and Response System JBoss - Command Execution

source: https://www.securityfocus.com/bid/19075/info Cisco Security Monitoring, Analysis and Response System CS-MARS is prone to a vulnerability that could permit the execution of arbitrary commands. An attacker could exploit this issue to execute arbitrary commands with administrative privileges...

PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability

No description provided by source. KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23, 2005 Vendor Contacted:...

HostingController: An attacker can gain reseller privileges and after that can gain admin privileges

Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I publish the most important bugs of hosting controller program, after 3 weeks from reporting to the main company for more security Title: An attacker can gain reseller privileges and after that can gain admin privileges Version: 6.1 Hotfix...

Hosting Controller <= 6.1 Hotfix 3.1 Privilege Escalation Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Hosting Controller function siteaction nact= "/hosting/addreseller.asp?htype=3" window.document.all.frm1.action = window.document.all.siteact.value + nact...

Hosting Controller 6.1 Hotfix 3.1 - Privilege Escalation

Title: An attacker can gain reseller privileges and after that can gain admin privileges Version: 6.1 Hotfix function siteaction nact= "/hosting/addreseller.asp?htype=3" window.document.all.frm1.action = window.document.all.siteact.value + nact window.document.all.frm1.submit Form1 URL: reseller...

CVE-2006-3147

Unspecified vulnerability in Hosting Controller before 6.1 aka Hotfix 3.2 allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is...

CVE-2006-3147

Technical details for CVE-2006-3147 are not provided in the connected documents; the initial description is high‑level and does not specify affected versions, vectors, or remediation. Monitor for updates.

CVE-2006-3147

Unspecified vulnerability in Hosting Controller before 6.1 aka Hotfix 3.2 allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is...

CVE-2006-3147: Undefined Security Weakness

Unspecified vulnerability in Hosting Controller before 6.1 aka Hotfix 3.2 allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is...

Hosting Controller <= 6.1 Hotfix 3.1 Authenticated User Privilege Escalation

According to its version number, the installation of Hosting Controller on the remote host enables any authenticated user to gain host admin privileges and view all his resellers and change their passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-2006-2890

Pixelpost 1-5rc1-2 and earlier are affected when register_globals is enabled. An attacker can set _SESSION["pixelpost_admin"] = 1 in admin scripts (e.g., admin/view_info.php) to gain administrator privileges and perform other attacks. No explicit remediation is provided in the provided documents.

CVE-2006-2635

Multiple cross-site scripting XSS vulnerabilities in Tikiwiki aka Tiki CMS/Groupware 1.9.x allow remote attackers to inject arbitrary web script or HTML via malformed nested HTML tags such as "ipt" in 1 offset and 2 days parameters in a tiki-lastchanges.php, the 3 find and 4 offset parameters in ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Tikiwiki aka Tiki CMS/Groupware 1.9.x allow remote attackers to inject arbitrary web script or HTML via malformed nested HTML tags such as "ipt" in 1 offset and 2 days parameters in a tiki-lastchanges.php, the 3 find and 4 offset parameters in ...

CVE-2006-2635

Multiple cross-site scripting XSS vulnerabilities in Tikiwiki aka Tiki CMS/Groupware 1.9.x allow remote attackers to inject arbitrary web script or HTML via malformed nested HTML tags such as "ipt" in 1 offset and 2 days parameters in a tiki-lastchanges.php, the 3 find and 4 offset parameters in ...

e107072.txt

Software: e107 CMS Versions: list$uid, $upw=$COOKIE$pref'cookiename' ? explode".", $COOKIE$pref'cookiename' : explode".", $SESSION$pref'cookiename'; ..... if$result = getuserdata$uid, "AND md5u.userpassword='$upw'", FALSE ..... Exploit: 0.6.xxx 1.blablahashpassword' union select from e107user whe...

Design/Logic Flaw

PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and view and configure log files, via a direct request to the 1 admin.php or 2 settings.php page...