bug in Invision Power Board

I found possibility to run Script java Script, VBScript on the system Invision Power Board... It's possible to do if it much many things like a withdrawal of cookie, advertising .... For example: http://forums.invisionpower.com/admin.php?adsess='scriptwindow.open window.location.search.substring...

CVE-2003-0272

admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value...

miniPortail admin.php Cookie Manipulation Security Bypass

The remote host is running MiniPortal, a PHP application for managing a web portal. It is possible to bypass admin authentication by setting a cookie with a value of 'adminok' on admin.php. A remote attacker could exploit this to gain administrative privileges on this host. %NASLMINLEVEL 70300 C...

IndyNews - PhpNuke module: several problems

IndyNews is a PhpNuke add-on that allows users to include media files images, documents and so on to articles. While I was playing with the module, I've found several problems. 1 function delMediaFile Anybody is able to delete any media attached to already approved articles. 2 function manageMedi...

PHPMyPub (PHP)

Informations : °°°°°°°°°°°°°° Website : http://phpmypub.free.fr Version : 1.2.0 Problem : Admin access PHP Code/Location : °°°°°°°°°°°°°°°°°°° admin/index.php : ------------------------------------------------------------------------ ... $auth = $HTTPCOOKIEVARS"adminpub"; if !$auth if $formulaire...

CVE-2002-1734

NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to "logged,true"...

CVE-2002-2163

KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "alreadyvoted" cookie by various methods, including a direct call to clearcookies.php...

CVE-2002-2054

TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain privileged web forum access by setting the validlevel cookie to admin...

[Mantis Advisory/2002-03] Bug listings of private projects can be viewed through cookie manipulation

Mantis Advisory/2002-03 Bug listings of private projects can be viewed through cookie manipulation 0. Table of Contents 1. Introduction 2. Summary / Impact analysis 3. Affected versions 4. Workaround / Solution 5. Detailed explanation 6. Contact details 1. Introduction Mantis is an Open Source...

PHP-Nuke v5.6 - Users can compromise admin accts.

Tested on PHP-Nuke v5.6 with Mozilla on Linux should work on past versions and on most browsers Impact: --------------------------------------------- Allows any user to get admin access to a PHP-Nuke site. Summary: ---------------------------------------------- Due to a XSS flaw in PHPNuke's...

CVE-2002-0516

SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie...

dotProject 0.2.1 - User Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/5347/info dotproject is prone to an issue which may allow remote attackers to bypass authentication and gain administrative access to the software. This may be accomplished by submitting a maliciously crafted 'usercookie' value either manually or via...

Security holes in two PHP services.

The first one is poll "avotravis " versions 2.1 and less. 1 Distortion of the limitations of multiple votes : Set the cookie with the name "alreadyvoted" and value "1" to the url /avotravis.php3?vote=1 for "yes" and /avotravis.php3?vote=1 for "no". 2 Access to the part administration : Set the...

Portix-PHP 0.4 - Cookie Manipulation

Portix-PHP 0.4 - Cookie Manipulation source: https://www.securityfocus.com/bid/4041/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP uses non-expiring cookies for session management. It is possible for a malicio...

Portix-PHP 0.4 - Cookie Manipulation

source: https://www.securityfocus.com/bid/4041/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP uses non-expiring cookies for session management. It is possible for a malicious user to manipulate values in their...

Big Security Holes in Portix-PHP Portal

On all version. The last one is 0.4.02 . To view files in the hard disk : www.hostportix.com/index.php?l=../../../etc/passwd www.hostportix.com/index.php? l=forum/view.php&topic=../../../etc/passwd To be administrator : Send the cookie name=access value=ok to /config/config.php . Portix team has...

CVE-2001-0451

INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookieadminauthenticated cookie value to 1...

INDEXU Authentication By-Pass

UNDERSEC SECURITY ADVISORY 4th March 20001 ======================================================================= PROGRAM: INDEXU VERSIONS: All versions prior to 2.0Beta 2.0Beta included OS: All REMOTE: YES LOCAL: YES CLASS: Authentication bypass POSTED BY: Sp4rK [email protected] BACKGROUND...

More on Ultimate Bullering Board

In response to Scott Ashman's post about UBB. After i discovered this bug last week i tried to contact infopop on 3 email adresses from their contact page i finally managed to find one that didn't bounce, but i haven't recieved any response yet. Anyway, Scott describes a way to retrieve other...