PT-2022-5628 · Moxa · Moxa Tn-5916 Series

Name of the Vulnerable Software and Affected Versions: Moxa TN-5916 series affected versions not specified Description: The issue is related to a potential modification of a cookie file in the Moxa TN-5916 series router's firmware. This could allow a remote attacker to elevate their privileges...

CVE-2021-35296

An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the cookie value and Response Path...

CVE-2021-35296

An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the cookie value and Response Path...

CVE-2021-35296

An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the cookie value and Response Path...

CVE-2021-35296

CVE-2021-35296 affects PTCL HG150-Ub v3.0, where an issue in the administrator authentication panel allows bypassing authentication by modifying the cookie value and the Response Path. The vulnerability is described consistently across multiple sources (NVD, Red Hat advisory, CVE listings). The c...

CVE-2021-35296

An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the cookie value and Response Path...

Ptcl Hg150-Ub 授权问题漏洞

Ptcl Hg150-Ub is a modem from Pakistan Telecommunication Company Ptcl, Pakistan. A security vulnerability exists in PTCL HG150-Ub v3.0, which can be exploited by an attacker to bypass authentication by modifying cookie values and response paths...

CVE-2020-6364

SAP Solution Manager and SAP Focused Run update provided in WILYINTROENTERPRISE 9.7, 10.1, 10.5, 10.7, allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection...

Code injection

SAP Solution Manager and SAP Focused Run update provided in WILYINTROENTERPRISE 9.7, 10.1, 10.5, 10.7, allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection...

CVE-2020-6364

CVE-2020-6364 affects SAP Solution Manager and SAP Focused Run. Exploitation allows an attacker to modify a cookie to execute OS commands, potentially gaining control of the host running CA Introscope Enterprise Manager and causing code injection, with read/modify of system files and impact to av...

CVE-2020-6364

SAP Solution Manager and SAP Focused Run update provided in WILYINTROENTERPRISE 9.7, 10.1, 10.5, 10.7, allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection...

Hot Drama CMS v2.1 has a flawed logic vulnerability

Hot Drama CMS is a movie and TV station building system developed by PHP+MySQL. There is a logic flaw vulnerability in /admin/cm.php in Hot Drama CMS v2.1, which can be exploited by an attacker to log in to the administration background by modifying the cookie value...

Authorization

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization when listing the history of another user via a modified "vaultizesessionid" value in a cookie...

CVE-2018-5190

PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pchead.php, pclogin.php, and pcloginpage.php...

CVE-2018-5190

PicturesPro Photo Cart 6 and 7 prior to Security-Patch-2018-B are vulnerable to an unauthenticated remote access flaw: an attacker can obtain arbitrary customer accounts by modifying cookies related to pc_head.php, pc_login.php, and pc_login_page.php. The issue is documented in CVE-2018-5190 and ...

The vulnerability of the web server of the Unitrends Enterprise Backup software allows a hacker to obtain root privileges.

The vulnerability of the web server of the Unitrends Enterprise Backup software lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to obtain root privileges by modifying the cookie file issued upon system login...

CVE-2016-2272

Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...

Eaton Lighting Systems EG2 Web Control Authentication Bypass Vulnerability (CNVD-2016-02006)

The Eaton Lighting Systems EG2 Web Control is a controller product from Eaton Lighting Systems USA for Internet and Wi-Fi LAN connections to the iLumin network. An authentication bypass vulnerability exists in Eaton Lighting Systems EG2 Web Control version 4.04P and earlier. A remote attacker cou...

ASP-Nuke Community <= 1.5 Cookie Privilege Escalation Vulnerability

No description provided by source. Title : ASP-Nuke Community = v1.5 Cookie Modification Privilege Escalation Vulnerability Author : ajann S.Page : http://www.rot.dk D.Page : http://www.rot.dk/aspnuke/downloads.asp Greetz : Nukedx Cookie ---------- Open the Cookie Editor= Find cookie informations...

Burden不正确身份验证漏洞

CVE ID：CVE-2013-7137 Burden是用PHP编写的一个全功能的任务管理应用程序。 该漏洞存在由于处理“burdenuserrememberme”cookie参数时没有足够的验证，远程未经认证的用户可以设置“burdenuserrememberme”cookie为“1”，并获得对应用程序的管理权限。 0 Burden=1.8 厂商补丁： Burden ----- Burden 1.8.1版本以修复此漏洞，建议用户下载使用： https://github.com/joshf/Burden/releases/tag/1.8.1 The exploitation exampl...