OpenDocMan 1.2.6.2 SQL Injection / Access Bypass vulnerabilities

OpenDocMan version 1.2.6.2 suffers from remote SQL injection and multiple access bypass vulnerabilities. 1 - Unprotected id parameter ----------------------------- In check-in.php the id variable is not filtered so that one can put in additional SQL statements. I have been able to get a UNION...

OpenDocMan 1.2.6.2 SQL Injection / Access Bypass

1 - Unprotected id parameter ----------------------------- In check-in.php the id variable is not filtered so that one can put in additional SQL statements. I have been able to get a UNION SELECT query to run but I do not think it's exploitable because there is a second query that runs with the i...

Novell NetIQ Privileged User Manager modifyAccounts Security Bypass

Added: 12/07/2012 BID: 56535 OSVDB: 87335 Background Novell NetIQ Privileged User Manager NPUM allows IT administrators to work on systems without exposing superuser administrator or supervisor passwords or root-account credentials to the administrator. Problem NetIQ Privileged User Manager 2.3.1...

Novell NetIQ Privileged User Manager modifyAccounts Security Bypass

Added: 12/07/2012 BID: 56535 OSVDB: 87335 Background Novell NetIQ Privileged User Manager NPUM allows IT administrators to work on systems without exposing superuser administrator or supervisor passwords or root-account credentials to the administrator. Problem NetIQ Privileged User Manager 2.3.1...

Novell NetIQ Privileged User Manager modifyAccounts Security Bypass

Added: 12/07/2012 BID: 56535 OSVDB: 87335 Background Novell NetIQ Privileged User Manager NPUM allows IT administrators to work on systems without exposing superuser administrator or supervisor passwords or root-account credentials to the administrator. Problem NetIQ Privileged User Manager 2.3.1...

Novell NetIQ Privileged User Manager modifyAccounts Security Bypass

Added: 12/07/2012 BID: 56535 OSVDB: 87335 Background Novell NetIQ Privileged User Manager NPUM allows IT administrators to work on systems without exposing superuser administrator or supervisor passwords or root-account credentials to the administrator. Problem NetIQ Privileged User Manager 2.3.1...

Tectia SSH USERAUTH Change Request Password Reset

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'net/ssh' class Metasploit3...

Buffalo Linkstation Privilege Escalation

Release Date. 5-Dec-2012 Last Update. - Vendor Notification Date. - Product. Linkstation & Others Platform. Buffalo Technology Affected versions. Including Actual Version Severity Rating. High Impact. Admin Password Reset Attack Vector. From remote Solution Status. Don't use Buffalo CVE reference...

Tectia SSH USERAUTH Change Request Password Reset

This Metasploit module exploits a vulnerability in Tectia SSH server for Unix-based platforms. The bug is caused by a SSH2MSGUSERAUTHPASSWDCHANGEREQ request before password authentication, allowing any remote user to bypass the login routine, and then gain access as root. This file is part of the...

Buffalo Linkstation Privilege Escalation Vulnerability

Buffalo Linkstation and various other Buffalo products suffer from a privilege escalation vulnerability where a permanent guest account can be used to change the administrative password. Product. Linkstation & Others Platform. Buffalo Technology Affected versions. Including Actual Version Severit...

(SSH.com Communications) SSH Tectia - USERAUTH Change Request Password Reset (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'net/ssh' class Metasploit3...

CVE-2012-5544

The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links by reading the logs in the Mandrill dashboard...

CVE-2012-1598

Joomla! 1.5.x before 1.5.26 has unspecified impact and attack vectors related to "insufficient randomness" and a "password reset vulnerability."...

Default credentials

The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links by reading the logs in the Mandrill dashboard...

Design/Logic Flaw

Joomla! 1.5.x before 1.5.26 has unspecified impact and attack vectors related to "insufficient randomness" and a "password reset vulnerability."...

CVE-2012-5544

The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links by reading the logs in the Mandrill dashboard...

CVE-2012-5544

Summary: The Mandrill module for Drupal 7.x (versions 7.x-1.x before 7.x-1.2) exposes password reset links via Mandrill dashboard logs when accessed by remote authenticated users. This is caused by the module logging message contents by default, enabling an attacker with dashboard access to trigg...

CVE-2012-1598

Joomla! 1.5.x before 1.5.26 has unspecified impact and attack vectors related to "insufficient randomness" and a "password reset vulnerability."...

CVE-2012-1598

CVE-2012-1598 affects Joomla! 1.5.x before 1.5.26, with an unspecified impact related to insufficient randomness and a password reset vulnerability. Connected sources confirm the existence of these issues but do not provide concrete exploit details or remediation in the available documents. No ex...

Buffalo Linkstation Privilege Escalation / Information Disclosure Vulnerabilities

Buffalo Linkstation suffers from information disclosure and privilege escalation vulnerabilities. Product. Linkstation & Others Platform. Buffalo Technology Affected versions. Including Actual Version Severity Rating. Medium Impact. Privilege escalation, Information Disclosure Attack Vector. From...