972 matches found
CVE-2007-0855
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive...
cpanel10-xss.txt
Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/cpanel.txt ----------------------------------------------------------- Software: CPanel Tested On CPanel 10 CPanel file Manager: PoC: http://target.com:2082/frontend/Servername/files/seldir.html?dir=XSS CPanel...
Authentication flaw
VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsnstopicid cookie to the targeted topic...
CVE-2006-1555
VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsnstopicid cookie to the targeted topic...
CVE-2006-1555
VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsnstopicid cookie to the targeted topic...
YaPiG Password Protected Directory Access Flaw
The remote version of YaPiG a flaw that can let a malicious user view images in password protected directories. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Fluxay Sensor Detection
This host appears to be running Fluxay Sensor on this port. Fluxay Sensor is a Backdoor which allows an intruder gain remote access to files on your computer. Similar to SubSeven This program is installs as a Service and is password protected. It protects itself so it is difficult to stop or...
CVE-2005-3432
The CVE-2005-3432 issue affects MiniGal 2 (MG2) 0.5.1, where a remote attacker can cause listing of password-protected images by sending a request to index.php with list = * and page = all. The public sources describe the vulnerability as an information-disclosure flaw allowing access to protecte...
CVE-2005-3432
MiniGal 2 MG2 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to wildcard and the page parameter set to all...
Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images
The MG2 Image Gallery system has the ability to make create online galleries. Even password protected once. By manipulating url from a gallery, you are able to list out all pictures in every gallery. Even though they are inside a password protected folder. Sample manipulation could be:...
MG2 0.5.1 - Authentication Bypass
source: https://www.securityfocus.com/bid/15235/info MG2 is affected by an authentication bypass vulnerability. This issue can allow remote attackers to gain access to password protected image galleries. All versions of MG2 are considered to be vulnerable at the moment. Minigal B13 is likely...
aRCHILLES Newsworld < 1.5.0-rc1 Multiple Vulnerabilities
aRCHILLES Newsworld 1.5.0-rc1 Multiple Vulnerabilities Software: aRCHILLES Newsworld Vulnerable versions: = 1.5.0-rc1 Type: Information Disclosure, Login Bypass Risk: Critical Date: 21st October 2005 Vendor: aRCHILLES http://www.scriptworld.kh-webcenter.de Credit: ======= These vulnerabilities we...
CVE-2004-2305
Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a password-protected file in a ZIP file, which causes eTrust to scan only the password protected file and skip the other files...
YaPiG Password Protected Directory Bypass
The remote host is running YaPiG, a web-based image gallery written in PHP. The remote version of this software contains a flaw that can let a malicious user view images in password protected directories. Successful exploitation of this issue may allow an attacker to access unauthorized images on...
CVE-2001-1464
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords...
CVE-2004-2220
F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain password-protected files in a ZIP file, which allows remote attackers to bypass anti-virus protection...
[SecurityOffice] Liteserve Web Server v2.0 Authorization Bypass Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Liteserve Web Server v2.0 Authorization Bypass Vulnerability -- - -- Type File Disclosure - -- Release Date October 24, 2002 - -- Product / Vendor LiteServe is a powerful, full-featured Web, EMail and FTP server. This server software is perfect fo...
Savant Web Server 3.1 - File Disclosure
source: https://www.securityfocus.com/bid/5709/info Savant Webserver is vulnerable to an input validation bug, that could allow malicious users access to password protected folders. It should be noted that versions below 3.1 may also be vulnerable to this issue. http://host/passwordfolder. "GET...
Blazix 1.2 - Password Protected Directory Information Disclosure
Blazix 1.2 - Password Protected Directory Information Disclosure source: https://www.securityfocus.com/bid/5567/info Blazix is a freely available, open source web server written in Java. It is available for Linux and Microsoft Windows operating systems. Blazix does not properly handle some specia...