8713 matches found
CVE-2009-2762
wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...
CVE-2008-6971
CVE-2008-6971 describes a by-design weakness in Simple Machines Forum (SMF) where password reset codes are generated using an insecure random-number state exposed in a hidden form field. A remote attacker could predict validation codes for the password reset, enabling modification of other users’...
CVE-2009-2762
wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...
2WIRE Gateway Bypass / Reset
2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET ==================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password even if the password was previously set. By setting a n...
WordPress <= 2.8.2 - BYPASS
Because of this admin password reset security Bypass vulnerability, the attackers can force a password reset for the first user in the database, possibly the administrator. Solution Update WordPress...
Gazelle CMS 1.0 Command Execution
!/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download: http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Found by whitesheep on 11/08/2009 Contact: [email protected] - https://www.ihteam.net Need magicquotegpc Off for RCE and LFI Thanks to R00TATI PASSWORD RESET:...
2WIRE Gateway Authentication Bypass & Password Reset Vulnerabilities
No description provided by source. 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET 08/04/09 ============================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password...
CVE-2008-6957
member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted 1 lostpasswd and 2 getpasswd actions, possibly involving predictable generation of the id parameter...
CVE-2008-6957
CVE-2008-6957 affects Crossday Discuz! Board (member.php) and allows remote attackers to reset passwords of arbitrary users via crafted lostpasswd and getpasswd actions, potentially due to predictable generation of the id parameter. The vulnerability is network-exposed with low attack complexity ...
CVE-2008-6957
member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted 1 lostpasswd and 2 getpasswd actions, possibly involving predictable generation of the id parameter...
WordPress < 2.8.4 Password Reset
The version of WordPress hosted on the remote web server has a flaw in the password reset mechanism. Validation of the secret user activation key can be bypassed by providing an array instead of a string. This allows anyone to reset the password of the first user in the database, which is usually...
Gazelle CMS 1.0 Multiple Vulnerabilities / RCE Exploit
Exploit for unknown platform in category web applications ====================================================== Gazelle CMS 1.0 Multiple Vulnerabilities / RCE Exploit ====================================================== !/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download:...
Gazelle CMS 1.0 - Multiple Vulnerabilities Remote Code Execution
Gazelle CMS 1.0 - Multiple Vulnerabilities Remote Code Execution !/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download: http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Found by whitesheep on 11/08/2009 Contact: [email protected] - https://www.ihteam.net Need...
2WIRE Gateway - Authentication Bypass Password Reset (1)
2WIRE Gateway - Authentication Bypass Password Reset 1 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET 08/04/09 ============================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to...
2WIRE Gateway Authentication Bypass & Password Reset Vulnerabilities
Exploit for hardware platform in category remote exploits ==================================================================== 2WIRE Gateway Authentication Bypass & Password Reset Vulnerabilities ==================================================================== 2WIRE GATEWAY AUTHENTICATION...
2WIRE Gateway Authentication Bypass & Password Reset
2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET ==================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password even if the password was previously set. By setting a n...
2WIRE Gateway - Authentication Bypass / Password Reset (1)
2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET 08/04/09 ============================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password even if the password was previously...
Gazelle CMS 1.0 Multiple Vulnerabilities / RCE Exploit
No description provided by source. !/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download: http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Found by whitesheep on 11/08/2009 Contact: [email protected] - https://www.ihteam.net Need magicquotegpc Off for RCE and LFI...
2Wire routers unauthorized access
It's possible to reset password without knowledge of old one...
WordPress < 2.8.4 'wp-login.php' 'key' Parameter Remote Administrator Password Reset (uncredentialed check)
According to its version number, the version of WordPress running on the remote server has a flaw in the password reset mechanism. Validation of the secret user activation key can be bypassed by providing an array instead of a string. This allows anyone to reset the password of the first user in...