2289 matches found
CVE-2007-2760
The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allows remote authenticated read-only users to gain read-write privileges. NOTE: some of these details are obtained from third party information...
CVE-2007-2760
The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allows remote authenticated read-only users to gain read-write privileges. NOTE: some of these details are obtained from third party information...
Code injection
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd...
CVE-2007-2251
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd...
CVE-2007-2251
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd...
CVE-2007-2251
CVE-2007-2251 : In Xaraya, the Roles module (versions
Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== Wordpress 2.1.2 xmlrpc Remote SQL Injection Exploit ===================================================== !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Wordpress version 2.1.2 is...
oracle10g-2.txt
/ Exploit for Oracle10g R1 and R2 prior to CPU Oct 2006 Joxean Koret Privileges needed: - CREATE SESSION - CREATE PROCEDURE / select from userroleprivs ; CREATE OR REPLACE FUNCTION F1 RETURN NUMBER AUTHID CURRENTUSER IS PRAGMA AUTONOMOUSTRANSACTION; BEGIN EXECUTE IMMEDIATE 'GRANT DBA TO TEST';...
CVE-2007-0147
Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers to upload files when these privileges were intended only for the Administrator and Editor roles...
Design/Logic Flaw
Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers to upload files when these privileges were intended only for the Administrator and Editor roles...
CVE-2007-0147
Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers to upload files when these privileges were intended only for the Administrator and Editor roles...
Cisco Security Advisory: Cisco Security Agent Management Center LDAP Administrator Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Agent Management Center LDAP Administrator Authentication Bypass Advisory ID: cisco-sa-20061101-csamc http://www.cisco.com/warp/public/707/cisco-sa-20061101-csamc.shtml Revision 1.0 For Public Release 2006...
SQL Server users and permissions-bug warning-the black bar safety net
Note: would like to this article dedicated to my father and mother, thank them for me over the years of parenting grace. Original statement: China dark domain network technology information Station the original article, The author ice blood sealing caseEvilOctal, reproduced please renowned...
Debian DSA-043-1 : zope
This advisory covers several vulnerabilities in Zope that have been addressed.Hotfix 08092000 'Zope security alert and hotfix product' The issue involves the fact that the getRoles method of user objects contained in the default UserFolder implementation returns a mutable Python type. Because the...
mambo451.txt
Vendor www.mamboportal.com Message from vendor : Mambo is one of the most powerful Open Source Content Management Systems on the planet. It is used all over the world for everything from simple websites to complex corporate applications. Mambo is easy to install, simple to manage, and reliable. B...
CVE-2004-0471
The CVE affects BEA WebLogic Server and WebLogic Express 7.0–SP5 and 8.1–SP2. The underlying issue is that the server does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, enabling unauthorized users to cause a denial of service (...
CVE-2004-0471
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service service shutdown...
CVE-2002-0170
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration...
CVE-2002-0170
CVE-2002-0170 affects Zope 2.2.0 through 2.5.1. The underlying issue is improper verification of access for objects with proxy roles, which could allow some users to access documents contrary to the intended configuration. Several sources (GHSA/OSV, CVE records, and related advisories) corroborat...