EUVD-2008-1184

Malware in sbrugna...

EUVD-2008-1183

Malware in sbrugna...

CVE-2008-1174

Cross-site scripting XSS vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2008-1175

Cross-site scripting XSS vulnerability in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter to aspAdmin/deleteUser.asp, a different vector than CVE-2008-1174. NOTE: the provenance of this information is unknown; the details are obtaine...

Cross site scripting

Cross-site scripting XSS vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter to aspAdmin/deleteUser.asp, a different vector than CVE-2008-1174. NOTE: the provenance of this information is unknown; the details are obtaine...

CVE-2008-1174

Cross-site scripting XSS vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2008-1175

Cross-site scripting XSS vulnerability in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter to aspAdmin/deleteUser.asp, a different vector than CVE-2008-1174. NOTE: the provenance of this information is unknown; the details are obtaine...

CVE-2008-1175

Cross-site scripting XSS vulnerability in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter to aspAdmin/deleteUser.asp, a different vector than CVE-2008-1174. NOTE: the provenance of this information is unknown; the details are obtaine...

CVE-2008-1174

CVE-2008-1174 concerns an XSS vulnerability in AuthentiX 6.3b1 Trial, specifically in editUser.asp where the username parameter can be exploited to inject arbitrary web script or HTML. The associated connected documents also note a related CVE-2008-1175 affecting aspAdmin/deleteUser.asp (a differ...

CVE-2008-1174

Cross-site scripting XSS vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2008-1175

AuthentiX 6.3b1 Trial is affected by an XSS in the deleteUser.asp path (username parameter) that can inject script/HTML. The CVE-2008-1175 entry aligns with Red Hat documentation describing the same issue as a cross-site scripting vulnerability in AuthentiX 6.3b1 Trial, with a vector distinct fro...

Flicks Software AuthentiX 6.3b1 - Username Multiple Cross-Site Scripting Vulnerabilities

Flicks Software AuthentiX 6.3b1 - Username Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28040/info Flicks Software AuthentiX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker...

authentix-xss.txt

Description: "Form-based or 100% cookie-free "Basic Authentication" website protection while keeping your NT Users Names and Passwords private. Protect all files, not just ASP pages. Validate against internal database, text file or external ODBC datasource." - www.flicks.com Summary: The Authenti...

CVE-2000-1133

Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . dot into the URL for a protected directory...

CVE-2000-1133

CVE-2000-1133 affects Authentix Authentix100; remote attackers can bypass authentication by inserting a dot (.) into the URL for a protected directory. The connected documents do not specify affected versions, platforms, or a remediation. No exploit code or in-the-wild details are provided.

Explanation Authentix Input Validation Error

Hi there, Yesterday I posted an advisory concerning a bug in Authentix that would allow users to bypass authentification. When I contacted the vendor about this they were very responsive and after some emails going here and there we agreed to postpone the bugtraq-posting for two weeks and give th...

Дырка в Authentix (authentication bypass)

Посредством специальных символов в URL возможно обойти процесс аутентификации...