Default credentials

Unspecified vulnerability in OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 allows remote attackers to set the password and obtain administrative access via unspecified vectors...

Default credentials

2z project 0.9.6.1 allows attackers to change the password without supplying the old password...

Default credentials

FAQMasterFlexPlus, possibly 1.5 or 1.52, stores the admin password in cleartext in a database, which might allow context-dependent attackers to obtain the password via unspecified database access...

Default credentials

IBM Tivoli Provisioning Manager Express provides unspecified information in error messages when 1 attempted duplication of a username occurs when creating an account or 2 when trying to login using a valid username, which makes it easier for remote attackers to enumerate usernames...

Default credentials

index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current user account by reading the password parameter value in the HTML source for the page generated by a profile action...

StarWind Control Port Default Credentials

The remote StarWind control port is configured to use the default credentials to control access. Knowing these, an attacker can gain administrative control of the affected application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29701; scriptversion"$Revision: 1.1...

Default credentials

The installation process for Oracle 10g and llg uses accounts with default passwords, which allows remote attackers to obtain login access by connecting to the Listener. NOTE: at the end of the installation, if performed using the Database Configuration Assistant DBCA, most accounts are disabled ...

Plumtree Portal Default Credentials

The remote host is running Plumtree portal, a corporate web portal. The remote installation of the Plumtree portal is configured to use default credentials to control administrative access. Knowing these, an attacker can gain control of the affected application. %NASLMINLEVEL 70300 C Tenable...

Several persistent XSS and CSRF on Wireless-G ADSL Gateway with SpeedBooster (WAG54GS)

http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs The following vulns were found on 24 June 2007 and were tested against firmware V1.00.06. The specific persistent XSS holes mentioned in this advisory were fixed by Cisco on firmware versio...

HP OpenView Client Configuration Manager Default Credentials

The remote host is running HP OpenView Client Configuration Manager OVCCM, a PC software configuration management application. The remote installation of OVCCM is configured to use default credentials to control access. Knowing these, an attacker can gain control of the affected application...

Default credentials

The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic...

CA Host-Based Intrusion Prevention System Server Default Credentials

The remote host is running Computer Associates' Host-Based Intrusion Prevention System CA HIPS Server, an intrusion prevention system for Windows. The remote installation of CA HIPS Server is configured to use default credentials to control access. Knowing these, an attacker can gain control of t...

CVE-2002-2290

CVE-2002-2290 affects Mambo Site Server 4.0.11, where a default username/password of admin enables remote attackers to gain privileges. The description across sources repeats that a default credential leads to privilege escalation, but no concrete exploit vectors or patched versions are provided ...

Default credentials

Stride 1.0 has a default administrator username of "scott" with the password "running", which allows remote attackers to obtain administrative access through login.php...

CVE-2007-5432

Stride 1.0 has a default administrator username of "scott" with the password "running", which allows remote attackers to obtain administrative access through login.php...

CVE-2007-5432

CVE-2007-5432 refers to a vulnerability in Stride 1.0 where a default administrator account uses username "scott" and password "running". According to the provided documents, remote attackers could obtain administrative access via login.php. The core issue is the use of a hardcoded default creden...

Default credentials

The conversion utility for converting CiscoWorks Wireless LAN Solution Engine WLSE 4.1.91.0 and earlier to Cisco Wireless Control System WCS creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges...

Cisco无线控制系统默认管理口令漏洞

BUGTRAQ ID: 26000 Cisco无线控制系统（WCS）是用于管理和控制Cisco统一无线网络的轻量级接入点和无线LAN控制器的集中系统级应用。 WCS在完成转换以后没有正确处理默认的帐号口令，远程攻击者可能利用此漏洞获取非授权访问。 CiscoWorks无线LAN解决方案引擎（WLSE）用户可以使用Cisco提供的转换工具转换到Cisco无线控制系统（WCS），这个转换工具使用默认的凭据创建和使用管理帐号。由于在转换过程中对更改这些凭据没有任何要求，因此攻击者可以利用这些拥有默认凭据的帐号在转换后获得对WCS的完全管理控制。 Cisco Wireless Control...

K2 KeyServer Default Credentials

The remote K2 KeyServer installation is configured to use default credentials to control access. Knowing these, an attacker can gain control of the affected application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid27041; scriptversion"$Revision: 1.13 $";...

Default credentials

ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow local users to read the password by listing the process and its arguments, as demonstrated by a call to ldappasswd in the changepassword function...