426 matches found
CVE-2000-1232: Undefined Security Weakness
upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method...
CVE-2000-0627
BlackBoard CourseInfo 4.0 is affected by an authentication flaw that allows local users to modify CourseInfo database information and gain privileges by directly calling supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl. The provided documents do not include remediati...
Blackboard Courseinfo v4.0 User Authentication
Apparently Courseinfo or at least the implementation I was playing with has no user authentication, meaning that anyone can force feed their own form values and Perl with merrily modify the database. So for instance running: all form input is in caps for readability...
CVE-1999-0734
A default configuration of CiscoSecure Access Control Server ACS allows remote users to modify the server database without authentication...
CVE-1999-0734: Undefined Security Weakness
A default configuration of CiscoSecure Access Control Server ACS allows remote users to modify the server database without authentication...