7732 matches found
phpPolls 1.0.3 Administration ByPass
SOFTWARE: ========= phpPolls 1.0.3 DESCRIPTION: ============ dork: phpPolls view.php3 add to last path phpPollAdmin.php3?pollaction=create create a new poll Credits:AlpEren and tugr@ Site: http://www.ayyildiz.org http://www.ayyildiz-team.org Special thanx to...
IBM DB2 Administration Server Detection
The remote host is running an IBM DB2 Administration Server. DB2 is an enterprise relational database management system, and the Administration Server is used by DB2 to administer databases across a network. C Tenable, Inc. include"compat.inc"; if description scriptid22016; scriptversion"1.31";...
CVE-2006-3226
Cisco Secure Access Control Server ACS 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management...
CVE-2006-3189
CVE-2006-3189 is an XSS vulnerability in HotPlug CMS 1.0, affecting the file administration/tblcontent/login1.php where an attacker can inject arbitrary script/HTML via the msg parameter. The available sources confirm the presence of a cross-site scripting flaw but do not provide exploit details,...
Integrity Clientless Security (ICS) Update 3.7.87.0
Check Point Integrity Clientless Security ICS for Connectra prevents users with potentially harmful software from accessing your network and requires that they conform to the organization?s antivirus and firewall policies. For more information, please refer to Connectra documentation and to ICS...
MailEnable Enterprise Edition ASP Version <= 2.0
Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version = 2.0 that I listed them below: 1 - Any user can login to web administration site. 2 - Authenticated normal user can gain ADMIN or SYSADMIN level, also remote user can disab...
MailEnable Enterprise 2.0 - ASP Multiple Vulnerabilities
MailEnable Enterprise 2.0 - ASP Multiple Vulnerabilities Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version POSTOFFICE -----------------------End---------------------------- 2 Authenticated normal user can gain ADMIN or...
MailEnable Enterprise 2.0 - 'ASP' Multiple Vulnerabilities
Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version POSTOFFICE -----------------------End---------------------------- 2 Authenticated normal user can gain ADMIN or SYSADMIN level, also remote user can disable him/her account!...
MailEnable Enterprise <= 2.0 (ASP Version) Multiple Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== MailEnable Enterprise POSTOFFICE ---------------...
TIBCO Rendezvous messaging software buffer overflow
Buffer overflow in web administration interface...
Design/Logic Flaw
The Administration Console in Secure Elements Class 5 AVR aka C5 EVM before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console...
CVE-2006-2715
The Administration Console in Secure Elements Class 5 AVR aka C5 EVM before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console...
CVE-2006-2715
CVE-2006-2715 affects the Administration Console of Secure Elements Class 5 AVR (C5 EVM) prior to version 2.8.1. Root cause: access control is not enforced, enabling remote attackers to gain console access to servers. Impact is partial confidentiality/integrity/availability. Remediation: upgrade ...
CVE-2006-2715
The Administration Console in Secure Elements Class 5 AVR aka C5 EVM before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console...
Seditio Cross Site Scripting Vulnerability
Advisory : Cross Site Scripting in Seditio http://www.neocrome.net Release Date : 24/05/2005 Last Modified : 24/05/2005 Author : Yunus Emre Yilmaz http://yns.zaxaz.com Application : Seditio v102 maybe older versions Risk : Critical Problem : Ldu's logging all referer info for administrator.If an...
PunkBuster-1.229.txt
Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Duty 2 = v1.108 DOOM 3 = v1.159 Enemy...
PunkBuster < 1.229 (WebTool Service) Remote Buffer Overflow DoS
Exploit for multiple platform in category dos / poc =============================================================== PunkBuster 1.229 WebTool Service Remote Buffer Overflow DoS =============================================================== Luigi Auriemma Application: PunkBuster...
PunkBuster 1.229 - WebTool Service Remote Buffer Overflow (Denial of Service) (PoC)
PunkBuster 1.229 - WebTool Service Remote Buffer Overflow Denial of Service PoC Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietn...
PunkBuster < 1.229 (WebTool Service) Remote Buffer Overflow DoS
No description provided by source. Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Dut...
Information disclosure
The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive information...