8671 matches found
BEA WebLogic 7.0/8.1 - Administration Console Cross-Site Scripting
source: https://www.securityfocus.com/bid/14657/info BEA WebLogic administration console is prone to cross-site scripting attacks. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may...
CVE-2005-2584: Undefined Security Weakness
The web administration interface in Mentor ADSL-FR4II router running firmware 2.00.0111 does not set a default password, which allows local users to gain access...
gurgens21.txt
Update: 1:02 AM 5/13/2005 Subject: " Gurgens Guest Book Password Database Vulnerability " Vulnerable version: Guest Book 2.1 Description: Guest Book is a complete solution which requires none or very little effort to set up and match existing website configuration. Control Panel with "Virtual...
nexusway.txt
Product : Neteyes Nexusway http://www.neteyes.com.tw Description: Neteyes Nexusway multiple vulnerability Severity: Very High Description =========== The NexusWay is a Multiservice Border Gateway that provides the Multiaccess and Multiservice capabilities in the border segment of an enterprise...
CVE-2005-2374
Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the 1 Telnet or 2 web administration interfaces...
CVE-2005-2374: Undefined Security Weakness
Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the 1 Telnet or 2 web administration interfaces...
Hosting Controller Software Detection
The remote host is running Hosting Controller, a commercial web-hosting automation suite for the Windows Server family platform. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid19254; scriptversion"1.15"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Hosting...
CVE-2001-1527
easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtain the passwords and gain access...
CVE-2001-1527
The CVE affects easyNews 1.5 and earlier, where administration passwords are stored in cleartext in the file settings.php. This enables local users to obtain passwords and gain access due to improper password storage. The provided documents do not specify a vendor patch or remediation steps; no e...
CVE-2005-2075
PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/dbbackups directory in PHP-Fusion 6.0 ...
CVE-2005-2051
Buffer overflow in the VERITAS Backup Exec Web Administration Console BEWAC 9.0 4367 through 10.0 rev. 5484 allows remote attackers to execute arbitrary code...
CVE-2002-1785
Zeus Web Server (Zeus Administration Server) versions 4.0–4.1r2 are affected by an XSS vulnerability in which remote authenticated users can inject arbitrary script or HTML via the section parameter to index.fcgi. The description confirms the vulnerability is an XSS issue without providing detail...
CVE-2002-1785: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi...
CVE-2002-1949: Cleartext Transmission of Sensitive Information
The Network Attached Storage NAS Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password...
CVE-2005-2051
CVE-2005-2051 describes a buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) affecting versions 9.0 build 4367 up to 10.0 revision 5484, enabling remote attackers to execute arbitrary code. The root cause is a buffer overflow in BEWAC’s web interface. Impact per the pro...
CVE-2005-2051
Buffer overflow in the VERITAS Backup Exec Web Administration Console BEWAC 9.0 4367 through 10.0 rev. 5484 allows remote attackers to execute arbitrary code...
CVE-2005-2051: Undefined Security Weakness
Buffer overflow in the VERITAS Backup Exec Web Administration Console BEWAC 9.0 4367 through 10.0 rev. 5484 allows remote attackers to execute arbitrary code...
compozitSQL.txt
Date: 18:15 05/05/05 Subject: "Compozit Webhosting Panel Administration Vulnerability" Vulnerable version: Compozit 1.0 Description: Compozit is a France Webhosting that use Administration Panel to setup their website online.Have an Control Panel to upload,make a new directory,and modify web page...
CA eTrust Intrusion Detection CPImportKey Function Overflow DoS
The remote host is running CA eTrust Intrusion Detection System, a security solution with intrusion detection, antivirus, web filtering and session monitoring. The remote version of this software is affected by a denial of service vulnerability in the way it uses 'CPImportKey' function. An attack...
