3142 matches found
CVE-2007-4419
Admin.php in Olate Download od 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3AutoLogin authentication cookie, which makes it easier for remote attackers to guess the cookie and access the Admin area...
Authentication flaw
Admin.php in Olate Download od 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3AutoLogin authentication cookie, which makes it easier for remote attackers to guess the cookie and access the Admin area...
CVE-2007-4419
CVE-2007-4419 affects Olate Download (od) 3.4.1. Admin.php uses an OD3_AutoLogin cookie created from an MD5 hash of the admin username, user id, and group id, which can be guessed, enabling remote attackers to access the Admin area. In the provided sources, the vulnerability details are limited t...
Code injection
Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors. NOTE: this is probably different from CVE-2007-0916, but this is not certain due to lack ...
Code injection
Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport functionality in HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause an unspecified denial of service via unknown vectors...
CVE-2007-3923
The Common Internet File System CIFS optimization in Cisco Wide Area Application Services WAAS 4.0.7 and 4.0.9, as used by Cisco WAE appliance and the NM-WAE-502 network module, when Edge Services are configured, allows remote attackers to cause a denial of service loss of service via a flood of...
Denial of Service Vulnerability in Cisco Wide Area Application Services (WAAS) Software
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Webmatic before 2.7 have unknown impact and attack vectors, related to the "administration area."...
CVE-2007-3727
Multiple unspecified vulnerabilities in Webmatic before 2.7 have unknown impact and attack vectors, related to the "administration area."...
CVE-2007-3727
Technical details are not publicly provided in the supplied documents; no affected components, versions beyond "Webmatic before 2.7", or impact vectors are specified. Monitor for updates.
CVE-2007-3727
Multiple unspecified vulnerabilities in Webmatic before 2.7 have unknown impact and attack vectors, related to the "administration area."...
Inmostore 4.0 - 'index.php' SQL Injection
source: https://www.securityfocus.com/bid/24884/info Inmostore is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...
CVE-2007-1994
Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport functionality in HP-UX B.11.00 allows local users to cause a denial of service via unknown vectors. NOTE: due to lack of vendor details, it is not clear whether this is the same as CVE-2007-0916...
Satel Lite for PhpNuke (Satellite.php) <= Local File Inclusion
+-------------------------------------------------------------------- + + Satel Lite for PhpNuke Satellite.php = Local File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: NUke Satel lite + Class .............: LoCal File Inclusion + Risk...
Use DNS spoofing in the LAN hung it-vulnerability warning-the black bar safety net
Author: black lantern Black Mask） Source: Black Mask'blog Articles have been published inhack the X-Files2 0 0 6 1 0 period,reproduced please specify! DNS domain spoofing, believe that many friends have heard of it, but also often hear some XX large station was attacked by DNS spoofing attack,...
Spoofing using custom cursor and CSS3 hotspot — Mozilla
David Eckel reported that browser UI elements--such as the host name and security indicators--could be spoofed by using a large, mostly transparent, custom cursor and adjusting the CSS3 hotspot property so that the visible part of the cursor floated outside the browser content area...
Design/Logic Flaw
Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors...
mxBB Module Activity Games 0.92 - Remote File Inclusion
mxact mxBB Games Module --Remote File Inclusion Exploit Bug Found & Exploit coded By Dr Max Virus Download:http://www.mx-system.com/index.php?page=4&action=file&fileid=71 Problem area: if !fileexists$mxrootpath . 'modules/mxact/language/lang' . $boardconfig'defaultlang' . '/langactivity.'.$phpEx...
Hacker attack and Defense of the PPPoE authentication and use-vulnerability and early warning-the black bar safety net
A Foreword In recent years, Internet data traffic has developed rapidly, broadband users showed explosive growth, the operators in the use of xDSL, LAN, HFC, wireless and other access methods at the same time, in order to build an operable, manageable and profitable broadband network, is very...
