4703 matches found
Authentication flaw
CodeMunkyX aka free-php.net Simple Poll 1.0, when authentication is not required for the admin directory, allows remote attackers to gain administrative privileges by appending /admin/ to the top-level URI of the application...
CVE-2006-2235
CodeMunkyX aka free-php.net Simple Poll 1.0, when authentication is not required for the admin directory, allows remote attackers to gain administrative privileges by appending /admin/ to the top-level URI of the application...
CVE-2006-2235
CVE-2006-2235 affects CodeMunkyX (free-php.net) Simple Poll 1.0. The root cause is missing authentication for the admin directory, allowing remote attackers to gain administrative privileges by appending "/admin/" to the top-level URI. The vulnerability is network-exploitable with high complexity...
CVE-2006-2116
planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/galleryadmin.php...
CVE-2006-2116
CVE-2006-2116 concerns the planetGallery application. The vulnerability allows remote attackers to gain administrator privileges via a direct request to the file admin/gallery_admin.php. The available connected documents confirm planetGallery as the affected product and the specific administrativ...
CVE-2006-0230
Symantec Scan Engine 5.0.0.24 (and possibly earlier 5.0.x) is affected by an authentication design flaw that trusts the client-side applet to verify passwords. An unauthenticated remote attacker can gain administrative privileges by sending crafted XML requests to the server, effectively bypassin...
[Full-disclosure] Cisco Security Advisory: Multiple Vulnerabilities in the WLSE Appliance
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in the WLSE Appliance Advisory ID: cisco-sa-20060419-wlse http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml Revision 1.0 For Public Release 2006 April 19 1500 UTC GMT -...
The use of ASP Trojan horse to enhance the highest authority-vulnerability warning-the black bar safety net
| --- Some time ago the proliferation of dynamic network Forum upload vulnerability and the recent spate of a variety of asp systems exposed upload vulnerability, may be a lot of friends hands with a lot of webshell broiler, as choose how these Chicks are also vary from person to person, someone ...
CVE-2006-0367
Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."...
CVE-2006-0367
CVE-2006-0367 affects Cisco CallManager up to versions 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2. The issue is a privilege-escalation vulnerability where remote authenticated users with read-only administrative privileges can obtain full admin privile...
CVE-2005-4453
UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original 1 pUseruserid and 2 Useruserid parameters to UserProfile.aspx, then modifying the password field...
CVE-2005-4453
CVE-2005-4453 concerns Ultraapps Issue Manager prior to 2.1. A remote authenticated user can gain administrator privileges by tampering with parameters in UserProfile.aspx (p_User_user_id and User_user_id) and then modifying the password field. No patch or remediation details are provided in the ...
CVE-2005-3555
Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the 1 editattributes or 2 admin page...
CVE-2005-3555
CVE-2005-3555 refers to multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier. The issue allows authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter on the (1) editattributes page or (2) admin page. Affected software: P...
CVE-2003-1264
The CVE-2003-1264 issue affects the TFTP server used by Longshine WAP LCS-883R-AC-B and by the D-Link DI-614+ 2.0 based on it. The vulnerability enables remote attackers to download the configuration file (config.img) and other files without authentication, allowing access to the WEP secret and e...
CVE-2005-3555
Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the 1 editattributes or 2 admin page...
windows NT/2k/XP useradd shellcode for russian systems 318 bytes
Exploit for win32 platform in category shellcode ================================================================ Windows NT/2k/XP useradd shellcode for russian systems 318 bytes ================================================================ / \ win32 useradd shellcode for russian systems / by...
[SA17138] BEA WebLogic 24 Vulnerabilities and Security Issues
TITLE: BEA WebLogic 24 Vulnerabilities and Security Issues SECUNIA ADVISORY ID: SA17138 VERIFY ADVISORY: http://secunia.com/advisories/17138/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data, Brute force, Exposure of system information, Exposure of...
Cyphor 0.19 SQL Injection / Board takeover / cross site scripting
Cyphor 0.19 SQL Injection / Board takeover / cross site scripting 1if magic quotes off - SQL Injection: by "Forgot your password?" feature you can send yourself a new admin password and reset it, poc: email: youremail nick: 'or'X'='X soon, you will receive an email like this: You have registered...