SiteCubed MailWorks Professional - Authentication Bypass

source: https://www.securityfocus.com/bid/11095/info MailWorks Professional is reported prone to an authentication bypass vulnerability. The application uses cookies to store variables that determine the status of the authentication process. An attacker browsing the web application using speciall...

Yahoo Messenger Flaw allows injection of JavaScript into IM Windows

Title: Yahoo Messenger Flaw allows injection of JavaScript into IM Windows Author: Chet Simpson [email protected] Date: December 5th, 2003 Host Platforms tested: WindowsME and WindowsXP sp1a Target Applications tested: Yahoo Messenger 5.5 Build 1249 Yahoo Messenger 5.6 Build 1355 Target...

Security holes : Linker, Pharao

Product1 : Linker http://enproject.codelib.co.kr Versions : 2.0 Problems : - Reading in HD - Informations recovery passwords, DBHOST, DBUSER,... Exploits : - /imageview.php?uid=../function/passinfo.php or /imageview.php?uid=../function/baseinfo.php - Set cookies : "adminlogin","1"...