Authentication Bypass Vulnerability in phpLiterAdmin

High-Tech Bridge SA Security Research Lab has discovered vulnerability in phpLiterAdmin which could be exploited to bypass authentication mechanism and gain unauthorized access to the application. 1 Authentication Bypass Vulnerability in phpLiterAdmin The vulnerability exists due to a design erro...

Yourownbux 4.0 - cookie Authentication Bypass

Yourownbux 4.0 - cookie Authentication Bypass !/usr/bin/perl use LWP::UserAgent; use HTTP::Request; +-------------------------------------------------------------------------------------------------+- + Yourownbux v4.0 ------------------------------------------------------------+--+ + Cookie...

Yourownbux 4.0 - 'cookie' Authentication Bypass

!/usr/bin/perl use LWP::UserAgent; use HTTP::Request; +-------------------------------------------------------------------------------------------------+- + Yourownbux v4.0 ------------------------------------------------------------+--+ + Cookie Modification Exploit...

CVE-2002-2303

3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data...

xeforum-privesc.txt

-------------------------------------------------------------------- XEForum Cookie Modification Privilege Escalation Vulnerability -------------------------------------------------------------------- Vulnerable product: XEForum Vendor: http://www.xeforum.com/ Date: -------------------- Found: Ju...

XEForum Cookie Modification Privilege Escalation Vulnerability

-------------------------------------------------------------------- XEForum Cookie Modification Privilege Escalation Vulnerability -------------------------------------------------------------------- Vulnerable product: XEForum Vendor: http://www.xeforum.com/ Date: -------------------- Found: Ju...

ASP-Nuke Community <= 1.5 Cookie Privilege Escalation Vulnerability

No description provided by source. Title : ASP-Nuke Community = v1.5 Cookie Modification Privilege Escalation Vulnerability Author : ajann S.Page : http://www.rot.dk D.Page : http://www.rot.dk/aspnuke/downloads.asp Greetz : Nukedx Cookie ---------- Open the Cookie Editor= Find cookie informations...

[KAPDA::#52] - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability

KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability KAPDA New advisory Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23, 2005 Vendor Contacted: Jun 01, 2006...

PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability

Exploit for unknown platform in category web applications =================================================================== PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability =================================================================== KAPDA::52 - PHP-Post 1.0 Cookie...

PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability

No description provided by source. KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23, 2005 Vendor Contacted:...

PHP-Post 1.0 - Cookie Modification Privilege Escalation

PHP-Post 1.0 - Cookie Modification Privilege Escalation KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23,...

PHP-Post 1.0 - Cookie Modification Privilege Escalation

KAPDA::52 - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability Vulnerable product: Tested on PHP-Post 0.21 and 1.0 Vendor: http://php-post.co.uk Vulnerability: Privilege Escalation Date: -------------------- Found: Nov 23, 2005 Vendor Contacted: Jun 01, 2006 Release Date: July 18...

CVE-2005-2464

CVE-2005-2464 affects PCXP/TOPPE CMS. The issue allows remote attackers to bypass authentication and gain privileges by modifying the user’s cookie to match the target userid, enabling partial confidentiality/integrity/availability impact per CVSS. The provided documents do not specify affected v...

CVE-2005-2464

login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cookie to match the target userid...

CVE-2005-3495

Ar-blog 5.2 and earlier allows remote attackers to bypass authentication by modifying cookies...

CVE-2005-3495

CVE-2005-3495 affects Ar-blog (versions 5.2 and earlier). The vulnerability allows remote attackers to bypass authentication by manipulating cookies, indicating a flaw in how session/authentication state is enforced. The available documents confirm the vulnerability pattern (cookie-based auth byp...

CVE-2005-3495

Ar-blog 5.2 and earlier allows remote attackers to bypass authentication by modifying cookies...

CVE-2005-1482

ArticleLive 2005 allows remote attackers to gain privileges by modifying the 1 auth and 2 userId fields in a cookie...

CVE-2005-1482

CVE-2005-1482 affects ArticleLive 2005. Remote attackers can gain privileges by modifying the (1) auth and (2) userId fields in a cookie. The provided sources describe the cookie-tampering vulnerability and resulting privilege escalation; no explicit patch/remediation is detailed in the supplied ...

phpBB 2.0.12 - Session Handling Authentication Bypass (tutorial)

phpBB 2.0.12 - Session Handling Authentication Bypass tutorial 1. Register at forum? 2. Log in with account + UNCHECK "Log in automatically" 3. Close browser to be sure a cookie is made. 4. Locate cookie firefox: X:\Documents and Settings\Name\Application...