MailWorks.txt

Pimp industries. "Its all about the Bling, B^!%@s and Fame!" MailWorks Professional All versions Authentication bypass via cookie control C Paul Craig - Pimp Industries 2004 Background ------------- MailWorks Professional is a mailing list management application, developed by sitecubed. It provid...

CVE-2003-0588

admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password...

CVE-2003-0589

admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password...

php dotProject by pass authentication

SCAN Associates Sdn Bhd Security Advisory Product: dotProject 0.2.1.5 possibly other Vendor URL: http://www.dotmarketing.org/dotproject/ Summary: php dotProject by pass authentication Author: pokleyzz [email protected], sk [email protected], shaharil [email protected]...

Multiples holes in PHP services.

The url http://www.host.com/index.php?loggedin=true&action=auser&newun=test&newpw=test&newpw1=test&newlevel=1&submit=Save allow to create an admin access nick : test, password : test on a nWebSystems Voting System site. More details in french : http://balteam.multimania.com/Tuts/nwebsystemsvs.txt...

LB5000 Cookie filter vulnerability

--------------------------------------------------------------------------- LB5000 Cookie filter vulnerability --------------------------------------------------------------------------- Release infomation ------------------ Found Date: 2001-9-03 Release Date: 2001-10-30 Author:...

wftpd241-12-2.txt

================================================================ BluePanda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC12 05/09/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================ Problem: "Magic cookie" %C devulg...