PHP Topsites 2.2 - Multiple Vulnerabilities

PHP Topsites 2.2 - Multiple Vulnerabilities PHP Topsites Multiple Vulnerabilities Vendor: iTop 10 Product: PHP Topsites Version: tag of the description page, when submitting website, it may be possible to cause an administrator to edit or delete database entries. This issue will occur when an...

Re: [VSA0304] Half-Life Client remote hole via Adminmod plugin

Dear VOID.AT Security, This bug is not related to adminmod, but is rather the bug in Half Life itself. At least absolutely same problem is in amx plugin. amxpsay ssss causes same trouble. So this is a bug in HalfLife client and may be exploited by malicious server operator including remote one wi...

[VSA0304] Half-Life Client remote hole via Adminmod plugin

void.at Security Advisory VSA0304 Half-Life is the underlying game for the most popular online game today, "Counter-Strike", and others. Adminmod is a popular plugin to the half-life-server. Overview ======== Due to a format string in the Half-Life client, it is possible for an attacker who has...

CVE-2002-2345

Oracle 9i Application Server 9.0.2 stores the web cache administrator interface password in plaintext, which allows remote attackers to gain access...

CVE-2002-2412

Winamp 2.80 stores authentication credentials in plaintext in the 1 HTTP-AUTH and 2 winamp sections in winamp.ini, which allows local users to gain access to other accounts...

CVE-2002-2190

ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file...

CVE-2002-1762

Microsoft Baseline Security Analyzer MBSA 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java...

CVE-2002-2143

The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers to gain unauthorized access to the web server by viewing the source of admin.html...

CVE-2002-1939

FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties...

CVE-2002-1800

phpRank 1.8 stores the administrative password in plaintext on the server and in the "ap" cookie, which allows remote attackers to retrieve the administrative password...

PT-2002-2522 · Phprank · Phprank

Name of the Vulnerable Software and Affected Versions: phpRank version 1.8 Description: The issue allows remote attackers to retrieve the administrative password because it is stored in plaintext on the server and in the ap cookie. Recommendations: For phpRank version 1.8, consider disabling the...

Multiple Vuln. in Hotfoon.com's Hotfoon4.exe dialer

Multiple Vuln. in Hotfoon.com's Hotfoon4.exe dialer Hotfoon.com is a popular provider of PC to Phone, PC to PC Phone,Instant Messaging and Chat services. It's services are accessed by using a client program, Hotfoon4.exehttp://www.hotfoon.com/hotfoon4.exe, which includes the dialer. This is claim...

Vulnerability in Cutecast Forum v1.2

Vulnerability in Cutecast Forum v1.2 You can read passwords of all users. Passwords in Plaintext Exploit: http://www.website.com/cgi-bin/cutecast/members/username.user Zero X, member of www.lobnan.de -- http://www.linuxmail.org/ Now with POP3/IMAP access for only US$19.95/yr Powered by Outblaze...

CuteCast 1.2 - User Credential Disclosure

CuteCast 1.2 - User Credential Disclosure source: https://www.securityfocus.com/bid/6127/info It has been reported that the default configuration of CuteCast is insecure. According to the report, CuteCast stores user information in a publicly accessible directory. This includes plaintext...

CuteCast 1.2 - User Credential Disclosure

source: https://www.securityfocus.com/bid/6127/info It has been reported that the default configuration of CuteCast is insecure. According to the report, CuteCast stores user information in a publicly accessible directory. This includes plaintext credentials...

Webserver 4D Plaintext Password Storage

According to its Server response header, the remote web server is Webserver 4D 3.6 or lower. Such versions store all usernames and passwords in plaintext in the file 'Ws4d.4DD' in the application's installation directory. A local attacker can exploit this flaw to gain unauthorized privileges on...

CVE-2002-1097

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages...

CVE-2002-1022

BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges...

CVE-2002-1096

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code...

Microsoft Windows Remote Desktop Protocol checksum and keystroke vulnerabilities

Vulnerable All versions of Microsoft Windows using encrypted RDP are vulnerable to the checksum vulnerability. The following versions are also vulnerable to the keystroke vulnerability: Microsoft Windows XP Professional Microsoft Windows 2000 Server Microsoft Windows 2000 Advanced Server Microsof...