Default credentials

OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777...

Default credentials

Unspecified vulnerability in OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 allows remote attackers to set the password and obtain administrative access via unspecified vectors...

Default credentials

2z project 0.9.6.1 allows attackers to change the password without supplying the old password...

Default credentials

FAQMasterFlexPlus, possibly 1.5 or 1.52, stores the admin password in cleartext in a database, which might allow context-dependent attackers to obtain the password via unspecified database access...

Default credentials

index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current user account by reading the password parameter value in the HTML source for the page generated by a profile action...

Default credentials

IBM Tivoli Provisioning Manager Express provides unspecified information in error messages when 1 attempted duplication of a username occurs when creating an account or 2 when trying to login using a valid username, which makes it easier for remote attackers to enumerate usernames...

StarWind Control Port Default Credentials

The remote StarWind control port is configured to use the default credentials to control access. Knowing these, an attacker can gain administrative control of the affected application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29701; scriptversion"$Revision: 1.1...

Default credentials

The installation process for Oracle 10g and llg uses accounts with default passwords, which allows remote attackers to obtain login access by connecting to the Listener. NOTE: at the end of the installation, if performed using the Database Configuration Assistant DBCA, most accounts are disabled ...

Plumtree Portal Default Credentials

The remote host is running Plumtree portal, a corporate web portal. The remote installation of the Plumtree portal is configured to use default credentials to control administrative access. Knowing these, an attacker can gain control of the affected application. %NASLMINLEVEL 70300 C Tenable...

Several persistent XSS and CSRF on Wireless-G ADSL Gateway with SpeedBooster (WAG54GS)

http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs The following vulns were found on 24 June 2007 and were tested against firmware V1.00.06. The specific persistent XSS holes mentioned in this advisory were fixed by Cisco on firmware versio...

HP OpenView Client Configuration Manager Default Credentials

The remote host is running HP OpenView Client Configuration Manager OVCCM, a PC software configuration management application. The remote installation of OVCCM is configured to use default credentials to control access. Knowing these, an attacker can gain control of the affected application...

Default credentials

The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic...

CVE-2003-1507: Undefined Security Weakness

Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password, which allows remote attackers to gain administrative access...

CA Host-Based Intrusion Prevention System Server Default Credentials

The remote host is running Computer Associates' Host-Based Intrusion Prevention System CA HIPS Server, an intrusion prevention system for Windows. The remote installation of CA HIPS Server is configured to use default credentials to control access. Knowing these, an attacker can gain control of t...

CVE-2002-2290

CVE-2002-2290 affects Mambo Site Server 4.0.11, where a default username/password of admin enables remote attackers to gain privileges. The description across sources repeats that a default credential leads to privilege escalation, but no concrete exploit vectors or patched versions are provided ...

CVE-2002-2290: Undefined Security Weakness

Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges...

Default credentials

Stride 1.0 has a default administrator username of "scott" with the password "running", which allows remote attackers to obtain administrative access through login.php...

CVE-2007-5432

Stride 1.0 has a default administrator username of "scott" with the password "running", which allows remote attackers to obtain administrative access through login.php...

CVE-2007-5432

CVE-2007-5432 refers to a vulnerability in Stride 1.0 where a default administrator account uses username "scott" and password "running". According to the provided documents, remote attackers could obtain administrative access via login.php. The core issue is the use of a hardcoded default creden...

Default credentials

The conversion utility for converting CiscoWorks Wireless LAN Solution Engine WLSE 4.1.91.0 and earlier to Cisco Wireless Control System WCS creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges...