868 matches found
WordPress iMember360 Plugin <= 3.9.001 - Arbitrary user deletion
Because of this vulnerability, the attackers can delete arbitrary users via a request containing a user name in the "Email" parameter and the API key in the "i4wclearuser" parameter. Solution Update the plugin...
U-Mail邮件系统获取指定账户权限（任意用户明文密码查询）
简要描述： 可获取该系统指定用户权限，最近看发这套的人挺多的，不知道我这个你们觉得鸡肋不 详细说明： u-mail取回密码处设计不当，导致任意用户密码可越权查看，当update=s时，可查看任意账户密码 http://mail.xxx.com/webmail/[email protected]&update=s 直接查看指定邮箱账户密码 接下来想做什么都可以了。 谷歌: Powered by U-Mail 邮件服务器 官网Demo：...
CVE-2014-1347
Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations...
Code injection
Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations...
CVE-2013-4552
lib/Auth/Source/External.php in the drupalauth module before 1.2.2 for simpleSAMLphp allows remote attackers to authenticate as an arbitrary user via the user name uid in a cookie...
CVE-2014-1841
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. dot dot in the src parameter...
Wordpress iMember360 Plugin 3.8.012 - 3.9.001 - Multiple Vulnerabilities
Exploit for php platform in category web applications ------------ BACKGROUND ------------ "iMember360is a WordPress plugin that will turn a normal WordPress site into a full featured membership site. It includes all the protection controls you can imagine, yet driven by Infusionsoft's...
WordPress Plugin iMember360 3.8.012 3.9.001 - Multiple Vulnerabilities
WordPress Plugin iMember360 3.8.012 3.9.001 - Multiple Vulnerabilities ------------ BACKGROUND ------------ "iMember360is a WordPress plugin that will turn a normal WordPress site into a full featured membership site. It includes all the protection controls you can imagine, yet driven by...
WordPress iMember360 Plugin 3.8.012 - 3.9.001 - Multiple Vulnerabilities
WordPress iMember360 plugin is prone to multiple vulnerabilities, such as XSS, arbitrary user deletion, arbitrary code execution and disclosure of database credentials vulnerabilities. Solution Upgrade the plugin...
WordPress Plugin iMember360 3.8.012 < 3.9.001 - Multiple Vulnerabilities
------------ BACKGROUND ------------ "iMember360is a WordPress plugin that will turn a normal WordPress site into a full featured membership site. It includes all the protection controls you can imagine, yet driven by Infusionsoft's second-to-none CRM and e-commerce engine." --...
WordPress iMember360is 3.9.001 XSS / Disclosure / Code Execution
------------ BACKGROUND ------------ "iMember360is a WordPress plugin that will turn a normal WordPress site into a full featured membership site. It includes all the protection controls you can imagine, yet driven by Infusionsoft's second-to-none CRM and e-commerce engine." --...
iMember360 < 3.9.001 - Multiple Issues
- Disclosure of database credentials - XSS Vulnerabilities - Arbitrary user deletion - Arbitrary code execution...
CVE-2014-2034
Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...
Path traversal
Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...
CVE-2014-2034
Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...
CVE-2014-2034
CVE-2014-2034 affects Sonatype Nexus OSS/Pro 2.4.0–2.7.1, where an unauthenticated execution path enables attackers to create arbitrary user accounts. The vulnerability is described as a security bypass that could allow account creation without authentication. Public sources within connected data...
389-ds: flaw in parsing authzid can lead to privilege escalation
The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...
PT-2014-1864 · Red Hat +1 · 389-Ds-Base +2
Name of the Vulnerable Software and Affected Versions: 389-ds-base versions 1.2.11.15 through 1.2.11.25 Description: The issue allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind. This can lead to a violation of...
shopEx官网修改任意用户密码漏洞
简要描述： RT 详细说明： my.shopex.cn 登录账户处 点击忘记密码 通过注册时使用的手机号码找回密码 这里以我自己的手机号为例，获取一下验证码 输入正确验证码，直接下一步 输入新密码,这里我输的是:wooyun123 在提交确认的时候抓包 将此处手机号修改成要重置的用户手机 这里我测试的时候改成了18688888888这个手机号 显示成功 那么我们登录一下18688888888:wooyun123 成功登录 img src="https://images.seeb...
Piwigo 2.6.1 - CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: piwigo 2.6.1 - CSRF Date: 26/02/2014 Exploit Author: email protected Vendor Homepage: http://it.piwigo.org/ Software Link: http://it.piwigo.org/basics/downloads Version: 2.6.1 Tested on: Virtualbox debian A CSRF problem is prese...