4706 matches found
CVE-2007-4203
Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter...
CVE-2007-4188: Session Fixation
Session fixation vulnerability in Joomla! before 1.0.13 aka Sunglow allows remote attackers to hijack administrative web sessions via unspecified vectors...
[Full-disclosure] ASA-2007-019: Remote crash vulnerability in Skinny channel driver
Asterisk Project Security Advisory - ASA-2007-019 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Remote crash vulnerability in Skinny channel | | | driver |...
[Full-disclosure] ASA-2007-018: Resource exhaustion vulnerability in IAX2 channel driver
Asterisk Project Security Advisory - ASA-2007-018 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Resource Exhaustion vulnerability in IAX2 channel | | | driver...
Session fixation
Session fixation vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-3988
CVE-2007-3988 affects Virtual Hosting Control System (VHCS) up to version 2.4.7.1. The issue is a session fixation vulnerability where the web GUI accepts PHPSESSID values from GET/POST, enabling a remote attacker to hijack a user session. Impact is partial confidentiality/integrity/availability ...
CVE-2007-3988
Session fixation vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
Session fixation
Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-3978
Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-3978
Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...
CVE-2007-3978
CVE-2007-3978 describes a session fixation vulnerability in bwired where an attacker can hijack web sessions by supplying a PHPSESSID value. Public records indicate the issue affects bwired’s session handling and can allow credential- or session-based abuse without user interaction. The connected...
CVE-2007-3956
TeamSpeak WebServer 2.0 for Windows is affected by a denial-of-service vulnerability where input parameter length is not validated and TCP sessions are not expired. An attacker can trigger high CPU/memory usage by sending overly long username/password values to login.tscmd on TCP port 14534. The ...
ASA-2007-016: Remote crash vulnerability in Skinny channel driver
Asterisk Project Security Advisory - ASA-2007-016 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Remote crash vulnerability in Skinny channel | | | driver |...
ASA-2007-017: Remote Crash Vulnerability in STUN implementation
Asterisk Project Security Advisory - ASA-2007-017 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Remote Crash Vulnerability in STUN implementation |...
ASA-2007-014: Stack buffer overflow in IAX2 channel driver
Asterisk Project Security Advisory - ASA-2007-014 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Stack buffer overflow in IAX2 channel driver |...
CVE-2007-3597
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...
wheatblog-rfi.txt
Found by E.Minaev [email protected] ITDefence.ru 1 SQL Injection in login function. With help of this injection is possible to make per-symbol brute of tables names of blog's database magicquotesgpc should be tured off. ------------------------------------------ "$sql = "select from $tblUse...
Command injection
Microsoft Windows XP SP2 allows local users, who have sessions created by another user's RunAs run as command, to kill arbitrary processes of this other user, as demonstrated by the taskkill program. NOTE: the researcher claims a vendor dispute in which the vendor states that "RunAs and UAC are...
CVE-2007-3463
Microsoft Windows XP SP2 local privilege escalation CVE-2007-3463 allows a user who has a RunAs session to terminate arbitrary processes of another user, demonstrated by taskkill. Root cause relates to RunAs/UAC being treated as convenience features, not security boundaries. The connected sources...