2888 matches found
Authentication flaw
newsadmin.asp in Katy Whitton NewsCMSLite allows remote attackers to bypass authentication and gain administrative access by setting the loggedIn cookie to "xY1zZoPQ"...
[KAPDA::#44] - NewsCMSLite Login ByPass by Cookie
KAPDA::44 - NewsCMSLite Login ByPass by Cookie Vulnerability KAPDA New advisory Vulnerable product : NewsCMSLite Vendor: http://www.katywhitton.com Vulnerability: Authentication Flaw in 'newsadmin.asp' Lets Remote User Gain Administrative Access . Date : -------------------- Found : 2006/05/21...
Authentication flaw
Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain unauthorized access to the administrative section by setting the action parameter to editmember and the value parameter to 1...
Authentication flaw
JMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to admingallery.php3, possibly related to the add action...
Rapid7 Advisory R7-0021: Symantec Scan Engine Authentication Fundamental Design Error
Rapid7, LLC Security Advisory Rapid7 Advisory R7-0021 Symantec Scan Engine Authentication Fundamental Design Error Published: April 21, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0021.html CVE: CVE-2006-0230 1. Affected systems: KNOWN VULNERABLE: o Symantec Scan Engine v5.0.0.24 KNOWN...
Authentication flaw
editkategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie...
Authentication flaw
admin.php in PHP-Stats 0.1.9.1 and earlier allows remote attackers to bypass authentication, gain administrator privileges, and execute arbitrary PHP code by modifying the optionadminpass parameter and setting the passcookie to the MD5 hash of the specified password...
security flaw
Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...
Authentication flaw
Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which allows remote attackers to bypass login authentication, probably by setting the blogAdmin cookie...
Authentication flaw
Blue Coat Proxy Security Gateway OS SGOS 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote attackers to bypass connection filters...
Authentication flaw
phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication...
Authentication flaw
Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool...
Authentication flaw
Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...
Ubuntu 4.10 / 5.04 / 5.10 : courier vulnerability (USN-226-1)
Patrick Cheong Shu Yang discovered a flaw in the user account handling of courier-authdaemon. After successful authorization, the Courier mail server granted access to deactivated accounts. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...
Windows Debugger flaw can Lead to Elevated Privileges (Q320206)
Authentication Flaw in Windows Debugger can Lead to Elevated Privileges Q320206 Impact of vulnerability: Elevation of Privilege Affected Software: Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 Server, Terminal Server Edition Microsoft Windows 2000 Recommendation: Users using any of the affect...
Windows Debugger flaw can Lead to Elevated Privileges (Q320206)
Authentication Flaw in Windows Debugger can Lead to Elevated Privileges Q320206 SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
security flaw
A logic error in the CRAM-MD5 code for the University of Washington IMAP UW-IMAP server, when Challenge-Response Authentication Mechanism with MD5 CRAM-MD5 is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticat...
USN-17-1: passwd vulnerability
Martin Schulze and Steve Grubb discovered a flaw in the authentication input validation of the "chfn" and "chsh" programs. This allowed logged in users with an expired password to change their real name and their login shell without having to change their password. This flaw cannot lead to...
bbsEMarket.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20040915-07 BBS E-Market Professional multiple vulnerabilities Revision 1.0 Date Published: 2004-09-15 KST Last Update: 2004-09-15 Disclosed by SSR Team [email protected] Abstract ======== BBS E-MarketBobusang in Kore...