619 matches found
IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting
source: https://www.securityfocus.com/bid/9140/info IBM Directory Server is prone to cross-site scripting attacks via the web administrative interface. An attacker may be able to embed hostile HTML and script code in a malicious link to the server, which when followed will be rendered in the vict...
Nokia IPSO crossite scripting
Crossite scripting in web administration interface...
Unauthorized FTGate access
It's possible to access administration interface without authentication...
D-Link DI-704P - Long URL Denial of Service
D-Link DI-704P - Long URL Denial of Service source: https://www.securityfocus.com/bid/8355/info D-Link DI-704P has been reported prone to a remote denial of service vulnerability. The issue presents itself when a request of excessive length is sent to the router. This causes the device to behave ...
CVE-2003-0377
The CVE-2003-0377 entry concerns iisPROTECT (versions 2.2-r4 and earlier) and is triggered by an SQL injection in the web-based administration interface. The root cause is a vulnerability in how certain variables, notably GroupName on SiteAdmin.ASP, are processed, enabling remote attackers to inj...
Bad Blue protection bypass
It's possible to bypass ISAPI protection and obtain access to administration interface...
Unauthorized BadBlue access
It's possible to access administration interface...
WinRoute DoS
Program crashe if Host: header is missed in HTTP request to web administration interface...
PT-2002-2522 · Phprank · Phprank
Name of the Vulnerable Software and Affected Versions: phpRank version 1.8 Description: The issue allows remote attackers to retrieve the administrative password because it is stored in plaintext on the server and in the ap cookie. Recommendations: For phpRank version 1.8, consider disabling the...
Cobalt RaQ4 - Administrative Interface Command Execution
Cobalt RaQ4 - Administrative Interface Command Execution // source: https://www.securityfocus.com/bid/6326/info The RaQ4 is a server appliance distributed and maintained by Sun Microsystems. A vulnerability has been reported in the web administration interface of the RaQ4. It is possible for a...
Cobalt RaQ4 - Administrative Interface Command Execution
// source: https://www.securityfocus.com/bid/6326/info The RaQ4 is a server appliance distributed and maintained by Sun Microsystems. A vulnerability has been reported in the web administration interface of the RaQ4. It is possible for a remote attacker to execute commands. By passing malicious...
Lucent Access Point 300/600/1500 IP Services Router - Long HTTP Request Denial of Service
source: https://www.securityfocus.com/bid/5333/info The Lucent Access Point series of routers support a web based administrative interface. An error has been reported in the embedded HTTP server. It has been reported that sending a HTTP request consisting of approximately 4000 characters of data...
CVE-2002-0107
Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message...
[NEWS] Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...
CVE-2002-0238
Cross-site scripting vulnerability in web administration interface for NetGear RT314 and RT311 Gateway Routers allows remote attackers to execute arbitrary script on another client via a URL that contains the script...
CVE-2002-0238
Cross-site scripting vulnerability in web administration interface for NetGear RT314 and RT311 Gateway Routers allows remote attackers to execute arbitrary script on another client via a URL that contains the script...
CVE-2002-0238: Undefined Security Weakness
Cross-site scripting vulnerability in web administration interface for NetGear RT314 and RT311 Gateway Routers allows remote attackers to execute arbitrary script on another client via a URL that contains the script...
Unauthorized access in popper_mod
There is no limitation for access to administration interface in default configuration...
Oracle9i Application Server PL/SQL Gateway web administration interface uses null authentication by default
Overview A vulnerability exists in the Apache Procedural Language/Structured Query Language PL/SQL module used by Oracle 9i Application Server iAS. In its default configuration, the PL/SQL module grants unauthenticated access to the PL/SQL gateway web-based administration interface. Description...