CVE-2006-3753

The CVE-2006-3753 entry describes a vulnerability in setcookie.php used for the administration login in Professional Home Page Tools Guestbook. The implementation stores the hash of the administrator password in a cookie, which could enable an attacker to perform brute-force password guessing aft...

CVE-2006-3752: Undefined Security Weakness

Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the 1 hidemail, 2 name, 3 mail, 4 ip, or 5 text parameters...

CVE-2006-3753: Undefined Security Weakness

setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a cookie, which allows attackers to conduct brute force password guessing attacks after obtaining the hash...

ERNW-02-2006.txt

ERNW Security Advisory 02-2006 Buffer Overflow in SIP Foundry's SipXtapi Author: Michael Thumann Homepage: www.ernw.de 1. Summary: The sipXtapi library from sip foundry contains a buffer overflow when parsing the CSeq field. This flaw can be used by an attacker to gain control over EIP and execut...

Microsoft Windows Server Driver Remote Information Disclosure Vulnerability

Description Microsoft Windows Server driver is susceptible to a remote information-disclosure vulnerability. This issue is due to a flaw in the handling of certain SMB traffic. Exploiting this issue allows remote attackers to gain access to potentially sensitive fragments of kernel memory. This m...

In win Pro lower opening 3 3 8 9 up! - Vulnerability warning-the black bar safety net

This post go to Banyan brother forum that is not original is unclear In win2000 Professional Edition installed 3 3 8 9 Terminal Services It is well known windows2000 profassional does not support 3 3 8 9 Terminal Services, so if we found to give the administrator password of the meat machine is...

vlbook 1.2 XSS Attack

Hi, I found a bug in vlbook 1.2. Here you will find my original advisory: http://colander.altervista.org/advisory/vlbook.txt Best Regards, Omni -- Email.it, the professional e-mail, gratis per te: http://www.email.it/f Sponsor: Problemi di Liquidit? Con Logos Finanziaria 30.000 € in 24 ore a...

CVE-2006-3075: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PictureDis Professional 1.33 Build 234 and earlier and PictureDis Photoalbum 4.82 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to files in photoalbum/ including 1 thumstbl.php, 2 wpfiles.php,...

Update Protection against Ipswitch WhatsUp Professional 2006 Multiple Vulnerabilities

WhatsUp is a tool from Ipswitch that monitors application and network. WhatsUp runs a custom web server for the application Web interface on port 8022. Multiple flaws have been identified in the server including XSS vulnerabilities, page redirection via cross site scripting and header spoofing...

CVE-2006-2698: Undefined Security Weakness

Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid arguments to 1 layout/professional/functions.php or 2 getimage.php...

Authentication flaw

Ipswitch WhatsUp Professional 2006 only verifies the user's identity via HTTP headers, which allows remote attackers to spoof being a trusted console and bypass authentication by setting HTTP User-Agent header to "Ipswitch/1.0" and the User-Application header to "NmConsole"...

CVE-2006-2531

CVE-2006-2531 affects Ipswitch WhatsUp Professional (2006). The flaw enables an unauthenticated remote attacker to bypass authentication by spoofing HTTP headers, specifically setting User-Agent to “Ipswitch/1.0” and User-Application to “NmConsole.” The root cause is that authentication relies on...

CVE-2006-2531

Ipswitch WhatsUp Professional 2006 only verifies the user's identity via HTTP headers, which allows remote attackers to spoof being a trusted console and bypass authentication by setting HTTP User-Agent header to "Ipswitch/1.0" and the User-Application header to "NmConsole"...

Sql injection

SQL injection vulnerability in Hitachi EUR Professional Edition, EUR Viewer, EUR Print Service, and EUR Print Service for ILF allows remote authenticated users to execute arbitrary SQL commands via unknown attack vectors...

CVE-2006-2512

CVE-2006-2512 describes an SQL injection vulnerability in Hitachi EUR Professional Edition, EUR Viewer, EUR Print Service, and EUR Print Service for ILF. The issue allows remote authenticated users to execute arbitrary SQL commands via unknown attack vectors, indicating a compromise of confidenti...

CVE-2006-2512: Undefined Security Weakness

SQL injection vulnerability in Hitachi EUR Professional Edition, EUR Viewer, EUR Print Service, and EUR Print Service for ILF allows remote authenticated users to execute arbitrary SQL commands via unknown attack vectors...

CVE-2006-2531: Undefined Security Weakness

Ipswitch WhatsUp Professional 2006 only verifies the user's identity via HTTP headers, which allows remote attackers to spoof being a trusted console and bypass authentication by setting HTTP User-Agent header to "Ipswitch/1.0" and the User-Application header to "NmConsole"...

Ipswitch WhatsUp Professional Crafted Header Authentication Bypass

The remote host is running Ipswitch WhatsUp Professional, which is used to monitor states of applications, services and hosts. The version of WhatsUp Professional installed on the remote host allows an attacker to bypass authentication with a specially crafted request. %NASLMINLEVEL 70300 C Tenab...

Ipswitch WhatsUp Professional 2006 - Authentication Bypass

source: https://www.securityfocus.com/bid/18019/info Ipswitch WhatsUp Professional 2006 is susceptible to a remote authentication-bypass vulnerability. This issue allows remote attackers to gain administrative access to the web-based administrative interface of the application. This will aid them...

Ipswitch WhatsUp Professional 2006 - Authentication Bypass

Ipswitch WhatsUp Professional 2006 - Authentication Bypass source: https://www.securityfocus.com/bid/18019/info Ipswitch WhatsUp Professional 2006 is susceptible to a remote authentication-bypass vulnerability. This issue allows remote attackers to gain administrative access to the web-based...