1291 matches found
CVE-2006-7219: Undefined Security Weakness
eZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language, which allows remote authenticated users to create a draft in an unauthorized language by editing an archived version of an object, and then using Manage Versions to copy this version to a new draft...
Sql injection
Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via 1 the draft parameter to mailer.w2b or 2 the listDocPay parameter to DocPay.w2b...
Three XSS issues in SquirrelMail
Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the 1 mailto parameter in a webmail.php, the 2 session and 3 deletedraft parameters in b compose.php, and 4 unspecified vectors involving "a...
CVE-2006-3778: Undefined Security Weakness
IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the 1 "Save As Draft" option is used or 2 a "," comma is inside the "phrase" portion of an address, which can cause the e-mail to be sent to users that were deleted from the To, CC...
MailEnable Enterprise Edition ASP Version <= 2.0
Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version = 2.0 that I listed them below: 1 - Any user can login to web administration site. 2 - Authenticated normal user can gain ADMIN or SYSADMIN level, also remote user can disab...
MailEnable Enterprise 2.0 - ASP Multiple Vulnerabilities
MailEnable Enterprise 2.0 - ASP Multiple Vulnerabilities Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version POSTOFFICE -----------------------End---------------------------- 2 Authenticated normal user can gain ADMIN or...
MailEnable Enterprise <= 2.0 (ASP Version) Multiple Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== MailEnable Enterprise POSTOFFICE ---------------...
Microsoft PKINIT smart card logon vulnerable to information disclosure and spoofing
Overview Microsoft PKINIT smart card authentication is vulnerable to an information disclosure flaw that may allow an attacker to spoof a trusted server. Description From the Microsoft PKINIT description: PKINIT is an Internet Engineering Task Force IETF Internet Draft for "Public Key Cryptograph...
Microsoft Windows Kerberos PKINIT Man In The Middle Vulnerability
Description The PKINIT implementation in Microsoft Windows is susceptible to a man in the middle vulnerability. This issue is due to a failure of the software to properly validate network data. This issue is only exploitable by attackers that have access to valid logon credentials. Attackers...
ICMP attacks against TCP
TCP Maintenance and Minor F. Gont Extensions tcpm UTN/FRH Internet-Draft December 22, 2004 Expires: June 22, 2005 ICMP attacks against TCP draft-gont-tcpm-icmp-attacks-03.txt Status of this Memo This document is an Internet-Draft and is subject to all provisions of section 3 of RFC 3667. By...
