CVE-2003-0377

The CVE-2003-0377 entry concerns iisPROTECT (versions 2.2-r4 and earlier) and is triggered by an SQL injection in the web-based administration interface. The root cause is a vulnerability in how certain variables, notably GroupName on SiteAdmin.ASP, are processed, enabling remote attackers to inj...

Xpressions Software: Multiple SQL Injection Attacks To Manage WebStore

/------------------------ Pimp industries. --------------------------/ Xpressions Software : Multiple SQL Injection Attacks To Manage WebStores. BackGround ------------- When your suppliers and trading partners can interact with your organization as a seamless extension of your internal business...

CVE-2003-0240: Undefined Security Weakness

The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // double slash...

IISProtect 2.12.2 - Web Administration Interface SQL Injection

IISProtect 2.12.2 - Web Administration Interface SQL Injection source: https://www.securityfocus.com/bid/7675/info The IISProtect web administration interface does not properly sanitize user input. This could allow for SQL injection attacks on a Microsoft IIS server running IISProtect. Successful...

Bad Blue protection bypass

It's possible to bypass ISAPI protection and obtain access to administration interface...

ST FTP Service v3.0 - Unauthorized access, DOS + exploit

Hi, vuln, security team www.rst.bb1.ru RusH security team --= Advisory 8 =-- Product: ST FTP Service v3.0 Author: http://stsoft.newmail.ru Vuln: Unauthorized access, DOS Bug found: 14.05.2003 by 1dt.w0lf ST FTP Service - ftp server для win98,NT Поддерживает основной набор FTP-команд, докачку в об...

Kerio Personal Firewall vulnerable to replay attack

Overview Kerio Personal Firewall contains a vulnerability that may allow a remote attacker to replay an administration session. Description Kerio Technologies Inc. describes the Kerio Personal Firewall as follows:Kerio Personal Firewall KPF is a software agent that builds a barrier between your...

Kerio Personal Firewall vulnerable to buffer overflow

Overview Kerio Personal Firewall contains a buffer overflow that may allow a remote attacker to execute arbitrary code. An exploit for this vulnerability is publicly available. Description Kerio Technologies Inc. describes the Kerio Personal Firewall as follows:Kerio Personal Firewall KPF is a...

CVE-2003-0118: Undefined Security Weakness

SQL injection vulnerability in the Document Tracking and Administration DTA website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to 1 rawdocdata.asp or 2 RawCustomSearchField.asp containing an embedded SQL statement...

CVE-2003-0219: Undefined Security Weakness

Kerio Personal Firewall KPF 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid session and replaying them against the remote administration server...

CVE-2003-0210

The CVE-2003-0210 issue is a buffer overflow in Cisco Secure ACS for Windows CSAdmin (web management on port 2002). The root cause is CSAdmin handling a login request with an excessively long user parameter, triggering a buffer overflow that can cause DoS and may allow arbitrary code execution wi...

Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability

...

Cisco Security Advisory: Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability ======================================================================= Revision 1.0 For Public Release 2003 April 23 08:00 GMT -...

Unauthorized BadBlue access

It's possible to access administration interface...

FipsGuestbook Version 1.12.7 script injection.

Date: 14.04.2003 Subject: FipsGuestbook Version 1.12.7 script injection. Description: Written entirely in ASP and VBScript, easy to install ASP guestbook manager with web based administration panel. Vendor: FipsASP http://www.fips.at.tf Vulnerability: newentry.asp neglects filtering user input...

Web Wiz Site News realease v3.06 administration access.

Date: 14.04.2003 Subject: Web Wiz Site News realease v3.06 administration access. Description: Free asp news management system. Includes, simple intergration, short news item with link to full story, insert images, links, text formatting, user commentsoptional with email notification, anti-spam...

EZ Publish 2.2.7/3.0 - site.ini Information Disclosure

source: https://www.securityfocus.com/bid/7347/info eZ Publish has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying site.ini configuration file. The file contains eZ Publish administration credentials stored in...

Guestbook 4.0 - Sensitive Information Disclosure

source: https://www.securityfocus.com/bid/7320/info Guestbook has been reported prone to a sensitive information disclosure weakness. An attacker may disclose sensitive information regarding the Super Guestbook install by sending a HTTP request for the Guest Book passwd file. Administration...

ISC guestbook script injection vulnerability.

This advisory can be found at www.blacktigerz.org Date: 08.04.2003 Subject: ISC guestbook script injection vulnerability. Description: Free, easy to use asp powered guestbook. Main fetures are: web-based administration, bad word filtering. Vendor: http://www.isc-online.at Download:...

Orplex guestbook script injection.

This advisory and other useful files can be found at http://www.blacktigerz.org Date: 07.04.2003 Subject: Orplex guestbook script injection. Description: Free asp guestbook. Main fetures are:inserting smiles as icons; web-based administration; bad word filtering. Vendor: Orplex consulting inc...