734 matches found
Utopia News Pro 1.1.3 - news.php SQL Injection
Utopia News Pro 1.1.3 - news.php SQL Injection SQL INJECTION: /str0ke 3.10 07/10/2005 utopiaxpl.php Utopia News Pro 1.1.3 possibly prior versions SQL Injection / Administrative credentials disclosure by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to...
Utopia News Pro <= 1.1.3 (news.php) SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================= Utopia News Pro SQL INJECTION: /str0ke 3.10 07/10/2005 utopiaxpl.php Utopia News Pro 1.1.3 possibly prior versions SQL Injection / Administrative credentials disclosure by rgod make...
Utopia News Pro <= 1.1.3 (news.php) SQL Injection Exploit
No description provided by source. ?php bif magic quotes off -SQL INJECTION: /str0ke 3.10 07/10/2005 utopiaxpl.php Utopia News Pro 1.1.3 possibly prior versions SQL Injection / Administrative credentials disclosure by rgod site: http://rgod.altervista.org make these changes in php.ini if you have...
flatnuke256.txt
Flatnuke 2.5.6 Underlying system information disclosure / Administrative & users credentials disclosure / cross site scripting / path disclosure / resource consumption poc tested on Windows software: site: http://flatnuke.sourceforge.net/flatnuke/ 1 cross site scripting:...
Sun Java System Portal Server fails to properly handle changes to display options
Overview There is a vulnerability in the Sun Java System Portal Server, which could allow a remote, authenticated user to gain access to the administrative credentials of the Calendar server. Description The Sun Java System Portal Server is a content management system that provides centralized...
CVE-2004-0712
The configuration tools 1 config.sh in Unix or 2 config.cmd in Windows for BEA WebLogic Server 8.1 through SP2 create a log file that contains the administrative username and password in cleartext, which could allow local users to gain privileges...
BEA WebLogic Server configuration wizard stores administrative credentials in clear text log files
Overview There is a vulnerability in BEA WebLogic Server in which a user with access to log files generated by the configuration wizard could obtain the administrative username and password. Description BEA Systems describes WebLogic Server as "an industrial-strength application infrastructure fo...
PHP-Coolfile 1.4 - Unauthorized Administrative Access
source: https://www.securityfocus.com/bid/9018/info PHP-Coolfile allows unauthorized administrative access due to an error in the way access is evaluated in the action.php file. This could allow a remote user to obtain the administrative username and password for the site...
MPCSoftWeb 1.0 - Database Disclosure
MPCSoftWeb 1.0 - Database Disclosure source: https://www.securityfocus.com/bid/7390/info MPCSoftWeb does not sufficiently secure the database file. It is possible for remote attackers to request the database file and gain access to sensitive information such as administrative credentials for the...
Orinoco OEM Residential Gateway - SNMP Community String Remote Configuration
Orinoco OEM Residential Gateway - SNMP Community String Remote Configuration source: https://www.securityfocus.com/bid/5436/info Orinoco is the manufacturer of various wireless network components, including access points and network cards. It is possible to remotely gain access to the...
Sun JavaServer Default Admin Password
The remote host is running the Sun JavaServer. This server has the default username and password of admin. An attacker can use this to gain complete control over the web server configuration and possibly execute commands. %NASLMINLEVEL 70300 This script written by H D Moore See the Nessus Scripts...
CVE-2001-0586
TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords...
F5 Device Default Support Password
The remote F5 Networks device has the default password set for the 'support' user account. This account normally provides read/write access to the web configuration utility. An attacker could take advantage of this to reconfigure your systems and possibly gain shell access to the system with...
CVE-2001-0586
TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords...