discuz找回密码逻辑小缺陷

简要描述： 如果当前密码被他人知道 可能导致永远无法找回密码 详细说明： 某日，社工某骗子的某论坛ID发现的 通过过去csdn数据库查到了他的密码，竟然是一样的，果断登陆 登陆之后，想想，给他密码和邮箱修改了，改到了自己的 突然想研究下找回密码，只对次数进行了过滤，最后一次有效…… 试了下……更改邮箱之后之前邮箱里发的找回密码的邮件竟然还有效…… 首先各种办法，得到某ID，更改邮箱和密码，通过找回密码往自己改后的邮箱发找回密码的邮件，然后……ID主人发现被盗，邮箱被改肯定会联系管理员啊，管理员帮他改好了，你再用你改后邮箱里邮件找回密码，如此重复，一个ID就彻底废了 漏洞证明： 密码被他人...

Debian Security Advisory DSA 168-1 (PHP3, PHP4)

The remote host is missing an update to PHP3, PHP4 announced via advisory DSA 168-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

[Full-disclosure] [vuln.sg] Neon WebMail for Java Multiple Vulnerabilities

vuln.sg Vulnerability Research Advisory Neon WebMail for Java Multiple Vulnerabilities by Tan Chew Keong Release Date: 2006-09-20 Summary ------- 7 vulnerabilities have been found in Neon WebMail for Java. When exploited, these vulnerabilities allow executing of arbitrary JSP code, escalation of...

NeoSys Neon Webmail for Java 5.06/5.07 - 'updateuser?in_name' Servlet Cross-Site Scripting

source: https://www.securityfocus.com/bid/20109/info Neon WebMail is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. These issues include: - an arbitrary-file-upload vulnerability - an arbitrary-email-manipulation vulnerability - multiple...

NeoSys Neon Webmail for Java 5.06/5.07 - 'maillist' Servlet Multiple SQL Injections

source: https://www.securityfocus.com/bid/20109/info Neon WebMail is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. These issues include: - an arbitrary-file-upload vulnerability - an arbitrary-email-manipulation vulnerability - multiple...

CVE-2006-0798

Multiple directory traversal vulnerabilities in the IMAP service in Macallan Mail Solution before 4.8.05.004 allow remote authenticated users to read e-mails of other users or create, modify, or delete directories via a .. dot dot in the argument to the 1 CREATE, 2 SELECT, 3 DELETE, or 4 RENAME...

CVE-2006-0798

Multiple directory traversal vulnerabilities in the IMAP service in Macallan Mail Solution before 4.8.05.004 allow remote authenticated users to read e-mails of other users or create, modify, or delete directories via a .. dot dot in the argument to the 1 CREATE, 2 SELECT, 3 DELETE, or 4 RENAME...

CVE-2003-0728

CVE-2003-0728 affects Horde before 2.2.4. The vulnerability allows remote malicious websites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL. The NVD entry lists a CVSSv2 base score of 6.4 (Medium) with network access, low attack complexity, and no u...

sendmail.php.txt

Sequoiasoft's sendmail php script dangerous - By jwilkins PHP-Nuke Written by Sequioa Software, this script allows execution of arbitrary code by a malicious user. Written by Sequioa Software, this script allows execution of arbitrary code by a malicious user. Essentially, popen executes a shell...

Microsoft Outlook View Control allows execution of arbitrary code and manipulation of user data

Overview A vulnerability exists in an ActiveX control supplied with Microsoft Outlook 2002 that could allow malicious code on a web page or in an HTML email message to manipulate Outlook data or execute arbitrary code as the user running Outlook. Description Microsoft Outlook 2002 installs an...