4606 matches found
Authentication flaw
admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accounts via modified mot and droit parameters...
CVE-2007-3974
admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accounts via modified mot and droit parameters...
Code injection
PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...
CVE-2007-3592
PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...
CVE-2007-3592
PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...
CVE-2007-3500
Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie...
Code injection
Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie...
CVE-2007-3500
Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie...
elkagroup Image Gallery 1.0 Remote SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ Image Gallery 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xpr...
Elkagroup Image Gallery 1.0 - SQL Injection
--==+================================================================================+==-- --==+ Image Gallery 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SCRIPT DOWNLOAD: N/A SITE:...
Code injection
IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server database...
CVE-2007-0068
IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server database...
CVE-2007-2850
The Session Reliability Service XTE in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string...
CVE-2007-1898
formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails spam via modified recipient, SETTINGSallowedemailhosts, and subject parameters...
Code injection
formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails spam via modified recipient, SETTINGSallowedemailhosts, and subject parameters...
CVE-2007-1925
The borrado function in modules/YourAccount/index.php in Tru-Zone Nuke ET 3.4 before fix 7 does not verify that account deletion requests come from the account owner, which allows remote authenticated users to delete arbitrary accounts via a modified cookie...
CVE-2006-7191
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager LAM before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program...
PhpSpy 2 0 0 6 final modified version-the vulnerability warning-the black bar safety net
Files and directories to a ZIP package to download 2. MySql and Ftp brute force 3. Within the network computer name and IP conversion 4. The use of MySql upload download file 5. Added custom settings 6. Alexa rank,off by default 7. Using ADODB to execute SQL statements 8. There are other...
Code injection
The Project issue tracking module before 4.7.x-1.3, 4.7.x-2. before 4.7.x-2.3, and 5 before 5.x-0.2-beta for Drupal allows remote authenticated users, with "access project issues" permission, to read the contents of a private node via a URL with a modified node identifier...