601 matches found
Improper access control
PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for dbbackup.txt...
CVE-2009-1941
PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for dbbackup.txt...
CVE-2009-1941
PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for dbbackup.txt...
CVE-2009-1941
CVE-2009-1941 affects PAD Site Scripts 3.6. The vulnerability arises from storing sensitive information under the web document root with insufficient access control, allowing remote attackers to download the database via a direct request for dbbackup.txt. Impact is consistent with the CVSS v2 bas...
PAD Site Scripts 3.6 - Arbitrary Database Backup
--------------------------------------------------------------- --------------------------------------------------------------- PAD Site Scripts v3.6 Bypass DB Backup Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...
PAD Site Scripts 3.6 - Arbitrary Database Backup
PAD Site Scripts 3.6 - Arbitrary Database Backup --------------------------------------------------------------- --------------------------------------------------------------- PAD Site Scripts v3.6 Bypass DB Backup Vulnerability ---------------------------------------------------------------...
PAD Site Scripts 3.6 Remote Arbitrary Database Backup Vulnerability
No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- PAD Site Scripts v3.6 Bypass DB Backup Vulnerability --------------------------------------------------------------- Founder : TiGeR-D...
CVE-2009-1739
PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including administrative privileges, by setting the authuser cookie parameter to a valid username...
CVE-2009-1739
PAD Site Scripts 3.6 is vulnerable to an authentication bypass: remote attackers can set the authuser cookie parameter to a valid username and gain privileges as other users, including administrative rights. The vulnerability arises from how the authuser value is trusted for authentication, enabl...
CVE-2009-1739
PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including administrative privileges, by setting the authuser cookie parameter to a valid username...
PAD Site Scripts 3.6 Insecure Cookie Handling Vulnerability
No description provided by source. ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :PAD Site Scripts v3.6 Insecure Cookie Handling Vulnerability + Found by : Mr.tro0oqy...
PAD Site Scripts 3.6 - Insecure Cookie Handling
======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :PAD Site Scripts v3.6 Insecure Cookie Handling Vulnerability + Found by : Mr.tro0oqy + C0ntact : [email protected]...
PAD Site Scripts 3.6 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications =========================================================== PAD Site Scripts 3.6 Insecure Cookie Handling Vulnerability =========================================================== =======================================================...
Wayport Public Access PC Authentication Bypass Weakness
Application: Wayport Public Access PC Vendor: http://www.wayport.net Bug: Authorisation Bypass Risk: High Date: 8 April 2008 Author: Pascal Cretain e-mail: Pascal.Cretain at Gmail dot com List: BugTraq SecurityFocus ======= Product ======= Wayport's Public Access PC === Bug === There is an...
X-pad guestbook there is a great security-vulnerability warning-the black bar safety net
This program can search http://www. baidu. com/baidu? wd=x-pad&cl=3x-pad the keywords.。 On this guestbook, I found a modified version of the drawing: "Based on the text of the php guestbook,easy to install,powerful,good safety,the appearance of custom is strong,is a very useful guest book,...
eXtremail 2.1.1 - LOGIN Remote Stack Overflow
eXtremail 2.1.1 - LOGIN Remote Stack Overflow / extremail-v4.c Copyright c 2006 by eXtremail include include include include include define BUFSIZE 8192 define NOP 0x41 define PAD 0 / do you feel lucky? / define DEFPORT 4501 define PORTADMIN DEFPORT define PORTSHELL 4444 static const char...
KSign KSignSWAT 2.0.3.3 - ActiveX Control Remote Buffer Overflow
www.ksign.com - KSignSWAT SWATLogin PoC code function GetHeapPadHeapJam, SizeofHeapPad whileHeapJam.length2 SizeofHeapPad HeapJam +=HeapJam; HeapJam = HeapJam.substring0, SizeofHeapPad/2; return HeapJam; // buffer 671 bytes write, then EIP overwrite. var O5pad=unescape...
madwifi <= 0.9.2.1 WPA/RSN IE Remote Kernel Buffer Overflow Exploit
No description provided by source. / ---- madwifi WPA/RSN IE remote kernel buffer overflow ------ expoit code by: sgrakkyu antifork.org -- 10/1/2007 CVE: 2006-6332 Laurent BUTTI, Jerome RAZNIEWSKI, Julien TINNES for wpa .... memcpybuf, se-sewpaie, se-sewpaie1 + 2 .... .... the function re-uses ar...
CVE-2003-0465
The CVE-2003-0465 issue affects the Linux kernel (2.4/2.5) where strncpy does not pad with null bytes on architectures other than x86, potentially allowing information leaks. Red Hat’s RHSA-2004:188 and related advisories document this as a kernel vulnerability with fixes in updated kernel packag...
