10 matches found
EUVD-2002-0532
Malware in sbrugna...
CVE-2022-30624
Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password...
CVE-2022-30624 Chcnav - P5E GNSS Authentication bypass admin password reset
Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password...
Chcnav P5E GNSS 授权问题漏洞
Chcnav P5E GNSS is a Global Positioning System from Chcnav Corporation. A security vulnerability exists in the Chcnav P5E GNSS, which can be exploited by an attacker to reset the "admin" password by browsing to the "admin.html" page...
Cross site request forgery (csrf)
EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add...
tenfourzero.net Shutter 0.1.4 'admin.html' Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38849/info tenfourzero.net's Shutter is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
CVE-2002-2143
The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers to gain unauthorized access to the web server by viewing the source of admin.html...
CVE-2005-1422
CVE-2005-1422 affects Raysoft/Raybase Video Cam Server 1.0.0 beta. The vulnerability allows remote attackers to perform administrator operations and trigger a denial of service by sending a direct request to admin.html . The connected documents confirm the affected product and impact but do not p...
CVE-2005-1422
Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a denial of service server or camera shutdown via a direct request to admin.html...
CVE-2002-0537
The CVE-2002-0537 entry concerns StepWeb Search Engine (SWS) 2.5 where passwords are stored in links to manager.pl within the admin.html page. This design allows remote attackers who can access admin.html to gain administrative privileges on SWS. The description in multiple sources confirms the v...