3454 matches found
CVE-2005-4286
Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving "'smart' values for userid and password," probably involving an SQL injection vulnerability in the 1 pass and 2 usr parameters in submit.php...
CVE-2005-4286
The CVE-2005-4286 entry concerns PhpLogCon prior to 1.2.2. It describes an unspecified vulnerability that could allow remote attackers to use arbitrary profiles via unknown vectors, likely stemming from an SQL injection in submit.php affecting the pass and usr parameters. The available documents ...
CVE-2005-4286
Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving "'smart' values for userid and password," probably involving an SQL injection vulnerability in the 1 pass and 2 usr parameters in submit.php...
CVE-2005-3974
Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission...
CVE-2005-3974: Undefined Security Weakness
Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission...
DRUPAL-SA-2005-009 Bypass "view user profiles" permission
Andrew Widdowson informed us that it's possible to bypass the 'access user profile' permission if the server is running PHP5. No data can be changed though. Versions affected Drupal 4.6.0, 4.6.1, 4.6.2, 4.6.3 Solution If you are running Drupal 4.6.x and PHP5, then upgrade to Drupal 4.6.4...
CVE-2005-2866: Undefined Security Weakness
Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which allows local users to gain privileges...
Hummingbird FTP client weak encryption
Profiles are "encrypted" by XOR'ing with fixed byte value 0x7d...
Hummingbird FTP Weak Password Encryption
Hummingbird FTP Weak Password Encryption Critical: Less critical Impact: Exposure of sensitive information Where: Local system Solution Status: Unpatched Software: Hummingbird Connectivity 10.x http://connectivity.hummingbird.com/products/nc/cpia.html Description: A vulnerability has been...
Internet Explorer / MSN ICC Profiles Crash PoC Exploit
/-----------------------------edwardgagnon--------------/ Can crash msn and execute commands Windows has a buffer overflow vulnerability in the processing of embedded ICC Profiles inside images jpeg, tiff, etc... To test - create a jpeg in adobe photoshop and save it with the ICC checkbox enabled...
Microsoft Internet Explorer MSN - ICC Profiles Crash (PoC)
Microsoft Internet Explorer MSN - ICC Profiles Crash PoC /-----------------------------edwardgagnon--------------/ Can crash msn and execute commands Windows has a buffer overflow vulnerability in the processing of embedded ICC Profiles inside images jpeg, tiff, etc... To test - create a jpeg in...
MS Internet Explorer / MSN ICC Profiles Crash PoC Exploit
Exploit for unknown platform in category dos / poc ========================================================= MS Internet Explorer / MSN ICC Profiles Crash PoC Exploit ========================================================= /-----------------------------edwardgagnon--------------/ Can crash msn...
Microsoft Internet Explorer / MSN - ICC Profiles Crash (PoC)
/-----------------------------edwardgagnon--------------/ Can crash msn and execute commands Windows has a buffer overflow vulnerability in the processing of embedded ICC Profiles inside images jpeg, tiff, etc... To test - create a jpeg in adobe photoshop and save it with the ICC checkbox enabled...
CVE-2005-2257
The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the authorid parameter...
CVE-2005-2257
PhpSlash 0.8.0 is affected by a vulnerability in the saveProfile function that allows remote attackers to modify arbitrary profiles and gain privileges by changing the author_id parameter. The available sources (CVE/NVD) describe the flaw and its impact as complete confidentiality, integrity, and...
CVE-2005-2257
The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the authorid parameter...
Microsoft Color Management Module buffer overflow during profile tag validation
Overview Microsoft Color Management Module contains a flaw that may allow an attacker to execute arbitrary code. Description The Microsoft Color Management Module provides consistent color management operations between applications and devices, and transforms between colorspaces such as 'RGB' and...
Hosting Controller 6.1 - User Profile Unauthorized Access
source: https://www.securityfocus.com/bid/13816/info Hosting Controller is prone to an unauthorized access vulnerability. Reportedly an authenticated user can modify other user's profiles. This issue is due to a failure in the application to perform proper authentication before providing access t...
Hosting Controller 6.1 - User Profile Unauthorized Access
Hosting Controller 6.1 - User Profile Unauthorized Access source: https://www.securityfocus.com/bid/13816/info Hosting Controller is prone to an unauthorized access vulnerability. Reportedly an authenticated user can modify other user's profiles. This issue is due to a failure in the application ...