215 matches found
CVE-2005-2038
Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page...
Mambo 4.5 Server - 'user.php' Script Unauthorized Access
source: https://www.securityfocus.com/bid/9193/info It has been reported that Mambo Server may be prone to an unauthorized access vulnerability that may allow an attacker to modify a user and/or an administrator's information such as password, email, name etc, after supplying a legitimate user id...
DeskPro 1.1 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/8856/info It has been reported that DeskPro is prone to multiple SQL injection vulnerabilities due to insufficient sanitization of user-supplied input. The problem is reported to be present in various parameters such as cat, article, and ticketid of the...
Css in Xoops module glossary 1.3.x
Author: Magistrat Date: 30/03/2003 Object: XOOPS glossary Module Input Filtering Bug Allows Remote Users to Conduct Cross-Site Scripting Attacks Impact: Disclosure of authentication information, Execution of arbitrary code via network, Modification of user information, User access via network Fix...
CVE-2002-1462
CVE-2002-1462 affects OrganicPHP PHP-affiliate 1.0 (and possibly later), where details2.php allows remote attackers to modify information of other users by tampering with hidden form fields. The underlying issue is insufficient validation/authentication for user data in the affected script, enabl...
CVE-2000-0253: Undefined Security Weakness
The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields...
CVE-2000-0253
The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields...
CVE-2000-0102: Undefined Security Weakness
The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...
CVE-2000-0135: Undefined Security Weakness
The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...
CVE-2000-0136: Undefined Security Weakness
The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...
CVE-2000-0108: Undefined Security Weakness
The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...
CVE-2000-0137: Undefined Security Weakness
The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...
CVE-1999-0254: Undefined Security Weakness
A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information...