CVE-2005-4448

FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by obtaining the password hash possibly via CVE-2005-2813, then calculating the credentials and...

CVE-2005-4448

FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by obtaining the password hash possibly via CVE-2005-2813, then calculating the credentials and...

CVE-2005-4437

MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol EIGRP 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code MAC in the checksum, which allows remote attackers to sniff message hashes and 1 replay EIGRP HELLO messages or 2 cause...

CVE-2005-4437

CVE-2005-4437 describes a vulnerability in Extended Interior Gateway Routing Protocol (EIGRP) 1.2 as implemented in Cisco IOS 11.3 and later, where the MD5 neighbor authentication does not include the Message Authentication Code (MAC) in the checksum. This enables remote attackers to sniff messag...

ADP Forum 2.0,ADP Forum 2.0.1,ADP Forum 2.0.2,ADP Forum 2.0.3 versiyon user md5 hash bug

ADP Forum 2.0,ADP Forum 2.0.1,ADP Forum 2.0.2,ADP Forum 2.0.3 versiyon user md5 hash bug ---------------------------------------------------- site:http://www.linux.it/fedro/ demo:http://www.e-stamp.ru/forum203/ --------------------------------------------------...

adpHashdisclose.txt

ADP Forum 2.0,ADP Forum 2.0.1,ADP Forum 2.0.2,ADP Forum 2.0.3 versiyon user md5 hash bug ---------------------------------------------------- site:http://www.linux.it/fedro/ demo:http://www.e-stamp.ru/forum203/ --------------------------------------------------...

Mdaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow

This module exploits a buffer overflow in the CRAM-MD5 authentication of the MDaemon IMAP service. This vulnerability was discovered by Muts. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

CVE-2003-1245

index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where sessionid is set to the MD5 hash of a session cookie...

PHPWebThings 1.4 - 'forum' SQL Injection

!/bin/bin/perl ----------------------------------------------------- - SQL injection in phpwebthing v 1.4.4 - Founder by Qptan & Exploting by AhLam - www.leZe.Com Only For Geek Hacker's - coded by AhLaM A.1.M|at|hotmail.com - http://www.lezr.com/vb/showthread.php?t=6557...

Wizz Forum 1.20 - TopicID SQL Injection

Wizz Forum 1.20 - TopicID SQL Injection !/bin/env perl //----------------------------------------------------------- // Wizz Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster // http://WwW.SoQoR.NeT...

Unclassified NewsBoard 1.5.3 Patch 3 - Blind SQL Injection

Unclassified NewsBoard 1.5.3pl3 blind SQL injection...

Wizz Forum 1.20 - 'TopicID' SQL Injection

!/bin/env perl //----------------------------------------------------------- // Wizz Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster // http://WwW.SoQoR.NeT //----------------------------------------------------------- use LWP::Simple; print "\n"; print...

ibProArcade 2.x - module vBulletinIPB SQL Injection

ibProArcade 2.x - module vBulletinIPB SQL Injection Rankings for name will state the md5 hash for the user /str0ke ibProArcade 2.x IPB: index.php?act=Arcade&module=report&user=-1 union select password from ibfmembers where id=anyuser vBulettin forums: index.php?act=ibProArcade&module=report&user=...

X-News '/db/users.txt' Information Disclosure Vulnerability

X-News is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2004 Audun Larsen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linksys Wireless Internet Camera File Disclosure

The Linksys Wireless Internet Camera contains a CGI that allows remote attackers to disclosue sensitive files stored on the server. An attacker may use this CGI to disclosue the password file and from it the password used by the root use the MD5 value. OpenVAS Vulnerability Test $Id:...

Linksys Wireless Internet Camera File Disclosure (2004) - Active Check

The Linksys Wireless Internet Camera contains a CGI that allows remote attackers to disclosue sensitive files stored on the server. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Singapore MD5 Administrative Password Disclosure

Singapore is a PHP based photo gallery web application. Due to inaddequate security settings, the file used to stored the administrative password is easily accessible, and the MD5 with which the product protects the password is feasibably crackable. SPDX-FileCopyrightText: 2004 Noam Rathaus Some...

CVE-2005-3402

The SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not notify users when it cannot establish a secure channel with the server, which allows remote attackers to obtain authentication information without detection via a man-in-the-middle MITM attack that...

CVE-2005-3402

CVE-2005-3402 affects Mozilla Thunderbird SMTP client (notably 1.0.5 BETA and 1.0.7). The issue is that Thunderbird does not notify users when it cannot establish a secure channel with the SMTP server, enabling a MITM to obtain authentication information by bypassing TLS or downgrading CRAM-MD5 t...

CVE-2005-3402

The SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not notify users when it cannot establish a secure channel with the server, which allows remote attackers to obtain authentication information without detection via a man-in-the-middle MITM attack that...