CVE-2014-2197

The Administration GUI in the web framework in Cisco Unified Communications Domain Manager CDM in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID...

PT-2014-4551

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager CDM versions prior to 8.1.4 Description The issue is related to improper access control in the Administration GUI of the web framework. This allows remote authenticated users to modify administrative...

CVE-2014-2197: Undefined Security Weakness

The Administration GUI in the web framework in Cisco Unified Communications Domain Manager CDM in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID...

jax formmailer 3.0.0 - Remote File Inclusion Vulnerability

No description provided by source. --:remote file include:-- --------------------------------- script:Jax FormMailer 3.0.0 Release:01.06.2008 - Author: ahmadbady ----------------------------------------------------------------------- download...

ZyXEL Router P-660HN-T1A - Login Bypass

No description provided by source. Exploit Title: ZyXEL Router P-660HN-T1A - Login Bypass Date: 11/03/2013 Exploit Author: Michael Grifalconi [email protected] Vendor Homepage: http://www.zyxel.com/productsservices/p660hntxaseries.shtml?t=p Version: 3.40BYF.5 - Last avaiable If someo...

Cacheflow CacheOS 3.1/4.0 Web Administration Arbitrary Cached Page Code Leakage Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3841/info CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow. When a user connects to the system via the web administration interface on port...

GoodTech Telnet Server < 5.0.7 - Buffer Overflow Crash Exploit

No description provided by source. / GoodTech Telnet Server Buffer Overflow Crash POC created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on GoodTech Telnet Server versions 4.0 - 5.0 versions prior to 5.0.7 on a Windows XP Professional sp2 operating...

Cobalt RaQ4 Administrative Interface Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6326/info The RaQ4 is a server appliance distributed and maintained by Sun Microsystems. A vulnerability has been reported in the web administration interface of the RaQ4. It is possible for a remote attacker to execute...

Macallan Mail Solution Macallan Mail Solution 2.8.4 .6 (Build 260) - Web Interface Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9646/info A vulnerability has been reported in Macallan Mail Solution that may permit remote attackers to bypass authentication for the web interface. This may be exploited by submitting a specially crafted HTTP GET reque...

MyPHPSoft MyPHPLinks 2.1.9/2.2 - SQL Injection Administration Bypassing

No description provided by source. source: http://www.securityfocus.com/bid/6395/info MyPHPLinks is a freely available, open source PHP application distributed by MyPHPSoft. It is available for Unix, Linux, and Microsoft Windows operating systems. It has been reported that a problem with the...

PowerScripts PlusMail WebConsole 1.0 Poor Authentication Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and passwor...

IISProtect 2.1/2.2 Web Administration Interface SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7675/info The IISProtect web administration interface does not properly sanitize user input. This could allow for SQL injection attacks on a Microsoft IIS server running IISProtect. Successful exploitation could result in...

WinComLPD <= 3.0.2 - Buffer Overflow

No description provided by source. $Id: wincomlpdadmin.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Supernews <= 2.6.1 - SQL Injection Exploit

No description provided by source. ?php Exploit Title: Supernews = 2.6.1 SQL Injection Exploit Google Dork: intext:2003 - 2004 : SuperNews : Todos os direitos reservados Date: 2012/ Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/vT0FaOCySSH/supernews Version: 2.6.1 Tested on:...

phpPgAdmin <= 4.2.1 (_language) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl phpPgAdmin = 4.2.1 Local File Inclusion Vulnerability Script: phpPgAdmin is a web-based administratio...

Papoo 1.0.3 Plugin.PHP Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24634/info Papoo is prone to an authentication-bypass vulnerability because the application fails to check user privileges when accessing the administration pages. An attacker can exploit this issue to gain access to...

SAMBA 2.0.7 SWAT Symlink Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes...

lightweight news portal [lnp] 1.0b Multiple Vulnerabilities

No description provided by source. / | | \ | | | | \ \ / / | |/ | | | / | | | | | | | |\ V / | | | | '/ |/ \ | | / | '/ | | || | | |\ | || | | | | | | || | | \ \ / | | | | | | | |/|| |,||| ||/ ,|| |/|||/|| , | ---------------------------------------------------------------------------|/...

Nortel Contact Center Manager Administration Password Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34964/info Nortel Contact Center Manager Administration is prone to a password-disclosure vulnerability caused by a design error. Attackers can exploit this issue to gain access to the 'sysadmin' password. Successfully...

IP3 Networks IP3 NetAccess Appliance SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9858/info The IP3 NetAccess Appliance is reported prone to a remote SQL-injection vulnerability. This issue is due to the application's failure to properly sanitize user input. This issue may allow an attacker to gain ful...