4721 matches found
Default credentials
The Client Login Extension CLE in Novell Identity Manager before 3.5.1 20070730 stores the username and password in a local file, which allows local users to obtain sensitive information by reading this file...
Sybase ASA Default Database Password
The remote Sybase SQL Anywhere / Adaptive Server Anywhere server uses default credentials 'DBA' / 'SQL'. An attacker may use this flaw to execute commands against the remote host, as well as read your database content. C David Lodge 13/08/2007 This script is based on sybaseblankpassword.nasl whic...
Default credentials
2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default...
CVE-2007-4388: Undefined Security Weakness
2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default...
Default credentials
NETGEAR formerly Infrant ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from the hardware serial number, which makes it easier for remote attackers to guess the password and obtain login access...
Default credentials
The management interface in ZyNOS firmware 3.62WK.6 on the Zyxel Zywall 2 device has a certain default password, which allows remote attackers to perform administrative actions...
Default credentials
changePW.php in AV Tutorial Script avtutorial 1.0 does not require authentication or knowledge of an old password for password changes, which allows remote attackers to change passwords for arbitrary users via a modified password parameter...
Default credentials
The Jedox Palo 1.5 client transmits the password in cleartext, which might allow remote attackers to obtain the password by sniffing the network, as demonstrated by starting Excel with the Palo plugin, opening a cube, and performing an Insert View...
Apple iOS Default SSH Password Vulnerability
This module exploits the default credentials of Apple iOS when it has been jailbroken and the passwords for the 'root' and 'mobile' users have not been changed. Module Options msf use exploit/apple/ios/ssh/cydiadefaultssh msf undefinedcydiadefaultssh show actions ...actions... msf...
CVE-2007-3446
The vulnerability CVE-2007-3446 affects BugMall Shopping Cart 2.5 and earlier. The issue is the default credentials: username “demo” and password “demo,” which allow remote attackers to obtain login access. This constitutes an authentication issue that can enable unauthorized access to the applic...
CVE-2007-3446: Undefined Security Weakness
BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which allows remote attackers to obtain login access...
Default credentials
The Random Cookie Password functionality in the loaduser function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 does not clear the 1 username, 2 password, 3 usertheme, and 4 userlang cookies for unauthorized users, which has unknown impact and remote attack vectors...
Default credentials
The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...
Default credentials
NMASINST in Novell Modular Authentication Service NMAS 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file...
Default credentials
config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php. NOTE: this can be leveraged to upload and execute arbitrary code...
CVE-2007-3139
config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php. NOTE: this can be leveraged to upload and execute arbitrary code...
CVE-2007-3139
config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php. NOTE: this can be leveraged to upload and execute arbitrary code...
CVE-2007-3139
The CVE-2007-3139 entry applies to Quick.Cart versions 2.2 and earlier. According to connected records, the root cause is in config/general.php where a default username and password are used, permitting remote attackers to authenticate via an admin.php login action. The practical consequence is t...
CVE-2007-3139: Undefined Security Weakness
config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php. NOTE: this can be leveraged to upload and execute arbitrary code...