CVE-2005-4450

Cross-site request forgery CSRF vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag to serverprivileges.php, as demonstrated using the dbname and checkprivs parameters. NOTE: the provenance of this issue is unknown,...

CVE-2005-3129

Cross-site request forgery CSRF vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipityadmin.php...

CVE-2004-2443

Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the loggedon function in application.php...

CVE-2004-2087: Undefined Security Weakness

Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user...

Microsoft Windows SMB Registry : Last Logged User Name Disclosure

The registry key HKLM\Software\Microsoft\Windows NT\WinLogon\DontDisplayLastUserName is not set to 1. It means that users who attempt to log in locally will see the name of the last user who logged in successfully in this computer on the screen. C Tenable Network Security, Inc. include"compat.inc...

CVE-2002-0523

ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie...

CVE-2002-0523: Undefined Security Weakness

ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie...

Microsoft Windows - Local Users Information : User Has Never Logged In

Using the supplied credentials, Nessus was able to list local users who have never logged into their accounts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10915; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows -...

CVE-1999-1260

mSQL Mini SQL 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query...

CVE-2001-0435: Undefined Security Weakness

The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate...

Microsoft SQL Server 7.02000 Data Engine 1.02000 - xp_showcolv Buffer Overflow

Microsoft SQL Server 7.02000 Data Engine 1.02000 - xpshowcolv Buffer Overflow // source: https://www.securityfocus.com/bid/2038/info The API Srvparaminfo, which is implemented by Extended Stored Procedures XPs in Microsoft SQL Server and Data Engine, is susceptible to a buffer overflow...

CVE-1999-0361

CVE-1999-0361 affects NetWare deployments running LaserFiche (Novell NetWare version of LaserFiche). The vulnerable component is the storage of usernames and passwords in unencrypted form, and the vulnerability allows administrative changes to occur without logging. Public documentation consisten...

CVE-1999-1260

mSQL Mini SQL 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query...

PT-1999-1211 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT system where the Logon box displays the name of the last user who logged in. Recommendations: At the moment, there is no information about a newer version...