Joomla! 1.5.0 < 3.8.0 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is 1.5.0 or later but prior to 3.8.0. It is, therefore, affected by the following vulnerabilities : - A flaw exists related to SQL query handling that allows disclosure of article introduction...

Design/Logic Flaw

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

CVE-2017-14623

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

CVE-2017-14623

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

UBUNTU-CVE-2017-14623

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

CVE-2017-14623

CVE-2017-14623 affects the ldap.v2 (go-ldap) package for Go up to v2.5.0. The issue arises when an application relies on the Bind error return to authorize users and uses an LDAP server that permits unauthenticated binds; this can allow an attacker to login with an empty password, bypassing acces...

CVE-2017-14623

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

CVE-2017-14596

In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password...

CVE-2017-14596

In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password...

Default credentials

In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password...

CVE-2017-14596

CVE-2017-14596: Joomla! LDAP authentication plugin can disclose usernames and passwords when LDAP authentication is configured. Root cause is inadequate escaping in the LDAP plugin. Affected product: Joomla! versions earlier than 3.8.0. Impact is high for confidentiality (exposure of credentials)...

CVE-2017-14596

In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password...

Joomla! 3.7.5 - Takeover in 20 Seconds with LDAP Injection

Requirements - Who is affected Joomla! powers about 3.3% of all websites content and articles. Installations with the following requirements are affected by this vulnerability: Joomla! version 1.5 = 3.7.5 is installed Joomla! is configured to use LDAP for authentication This is not a configuratio...

PT-2017-4226 · Go · Ldap.V2

Name of the Vulnerable Software and Affected Versions: ldap.v2 aka go-ldap versions through 2.5.0 Description: The issue is related to the authentication procedure in the ldap.v2 package for Go. An attacker may be able to login with an empty password if the application relies solely on the return...

Cross site scripting

AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...

CVE-2015-1849

AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...

CVE-2015-1849

AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...

CVE-2015-1849

The CVE-2015-1849 issue affects Red Hat JBoss EAP 6.x, where the AdvancedLdapLodinMogule can disclose sensitive information by logging the LDAP bind credential password when TRACE logging is enabled. Impact is information disclosure (confidentiality loss) with no integrity or availability impact ...

Trend Micro Mobile Security for Enterprise get_user_list LDAPAccount SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Mobile Security for Enterprise. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of the getuserlist action. When parsing the...

EulerOS 2.0 SP2 : openldap (EulerOS-SA-2017-1202)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A double-free flaw was found in the way OpenLDAP's slapd server using the MDB backend handled LDAP searches. A remote attacker with access to...