609 matches found
Security holes in two PHP services.
The first one is poll "avotravis " versions 2.1 and less. 1 Distortion of the limitations of multiple votes : Set the cookie with the name "alreadyvoted" and value "1" to the url /avotravis.php3?vote=1 for "yes" and /avotravis.php3?vote=1 for "no". 2 Access to the part administration : Set the...
Portix-PHP 0.4 - Cookie Manipulation
Portix-PHP 0.4 - Cookie Manipulation source: https://www.securityfocus.com/bid/4041/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP uses non-expiring cookies for session management. It is possible for a malicio...
Portix-PHP 0.4 - Cookie Manipulation
source: https://www.securityfocus.com/bid/4041/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP uses non-expiring cookies for session management. It is possible for a malicious user to manipulate values in their...
Big Security Holes in Portix-PHP Portal
On all version. The last one is 0.4.02 . To view files in the hard disk : www.hostportix.com/index.php?l=../../../etc/passwd www.hostportix.com/index.php? l=forum/view.php&topic=../../../etc/passwd To be administrator : Send the cookie name=access value=ok to /config/config.php . Portix team has...
CVE-2001-0451
INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookieadminauthenticated cookie value to 1...
INDEXU Authentication By-Pass
UNDERSEC SECURITY ADVISORY 4th March 20001 ======================================================================= PROGRAM: INDEXU VERSIONS: All versions prior to 2.0Beta 2.0Beta included OS: All REMOTE: YES LOCAL: YES CLASS: Authentication bypass POSTED BY: Sp4rK [email protected] BACKGROUND...
More on Ultimate Bullering Board
In response to Scott Ashman's post about UBB. After i discovered this bug last week i tried to contact infopop on 3 email adresses from their contact page i finally managed to find one that didn't bounce, but i haven't recieved any response yet. Anyway, Scott describes a way to retrieve other...
