benjacms-uploadxss.txt

============================================================== Benja CMS 0.1 Upload/XSS Multiple Remote Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Benja CMS 0.1 (Upload/XSS) Multiple Remote Vulnerabilities

============================================================== Benja CMS 0.1 Upload/XSS Multiple Remote Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Virtual Support Office-XP <= 3.0.29 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Virtual Support Office-XP = 3.0.29 Multiple Remote Vulnerabilities =================================================================== AmnPardaz Security Research Team...

Virtual Support Office XP 3.0.29 - Multiple Vulnerabilities

Virtual Support Office XP 3.0.29 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Virtual Support Office-XP Multiple Vulnerabilities. Vendor: www.vso-xp.com Vulnerable Version: 3.0.29, 3.0.27 and prior versions Exploit: Available Impact: High Fix: N/A Original...

virtualsupport-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Virtual Support Office-XP Multiple Vulnerabilities. Vendor: www.vso-xp.com Vulnerable Version: 3.0.29, 3.0.27 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/47 1. Description: Virtual Suppo...

Virtual Support Office XP 3.0.29 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Virtual Support Office-XP Multiple Vulnerabilities. Vendor: www.vso-xp.com Vulnerable Version: 3.0.29, 3.0.27 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/47 1. Description: Virtual Suppo...

realm CMS 2.3 - Multiple Vulnerabilities

realm CMS 2.3 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

realmcms-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/40 1. Description:...

CVE-2007-2017: Undefined Security Weakness

siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request...

CVE-2007-0528: Undefined Security Weakness

The admin web console implemented by the Centrality Communications aka Aredfox PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote attackers to connect to existing superuser session...

CVE-2006-5980: Undefined Security Weakness

admlgnadmin.asp in Renasoft NetJetServer 2.5.3.939, and possibly earlier, does not properly perform login authentication, which allows remote attackers to obtain administrative privileges. NOTE: the provenance of this information is unknown; details are obtained from third party sources...

CVE-1999-1324: Improper Restriction of Excessive Authentication Attempts

VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing...