13 matches found
EUVD-2007-0053
Malware in sbrugna...
TaskTracker <= 1.5 (Customize.asp) Remote Add Administrator Exploit
No description provided by source. !-- Title : TaskTracker All Version Remote Add Admin Exploit Author : ajann Contact : : S.Page : http://www.geckovich.com $$ : $39.99 - $19.99 -- FORM NAME=AddUser METHOD=POST ACTION=http://target/path/Customize.asp?a=Add style=word-spacing: 0; margin-top: 0;...
hadoop-tasktracker-info NSE Script
Retrieves information from an Apache Hadoop TaskTracker HTTP status page. Information gathered: Hadoop version Hadoop Compile date Log directory relative to Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size,...
Apache Hadoop MapReduce TaskTracker Web Interface
The web interface for Hadoop MapReduce TaskTracker was detected on the remote host. This interface can be used to monitor MapReduce tasks submitted to this node. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50305; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/25"...
TaskTracker Customize.ASP管理员未授权访问漏洞
TaskTracker是一款基于ASP的WEB应用程序。 TaskTracker不正确过滤用户提交的输入,远程攻击者可以利用漏洞未授权访问应用程序。 问题是'Customize.ASP'脚本对用户提交的WEB参数缺少过滤,提交恶意参数可绕过验证以管理员权限访问应用系统。 Geckovich TaskTracker Pro 1.5 Geckovich TaskTracker 1.4 前没有解决方案提供: http://www.geckovich.com/default.asp?display=tasktracker...
Design/Logic Flaw
Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add action with a modified GroupID in a direct request to Customize.asp...
CVE-2007-0049
Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add action with a modified GroupID in a direct request to Customize.asp...
CVE-2007-0049
Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add action with a modified GroupID in a direct request to Customize.asp...
CVE-2007-0049
Geckovich TaskTracker Pro 1.5 and earlier is affected by CVE-2007-0049. The vulnerability allows remote attackers to add administrative or other accounts by sending a direct request to Customize.asp with a modified GroupID in the Add action. The described impact is the ability to create extra acc...
TaskTracker All Version Remote Add Admin Exploit
!-- Title : TaskTracker All Version Remote Add Admin Exploit Author : ajann Contact : : S.Page : http://www.geckovich.com $$ : $39.99 - $19.99 -- FORM NAME="AddUser" METHOD="POST" ACTION="http://target/path/Customize.asp?a=Add" style="word-spacing: 0; margin-top: 0; margin-bottom: 0" td valign=to...
TaskTracker 1.5 - Customize.asp Remote Add Administrator
TaskTracker 1.5 - Customize.asp Remote Add Administrator Publisher Editor Administrator input type="submit" value="Gonder"...
TaskTracker 1.5 - 'Customize.asp' Remote Add Administrator
Publisher Editor Administrator...
TaskTracker <= 1.5 (Customize.asp) Remote Add Administrator Exploit
No description provided by source. !-- Title : TaskTracker All Version Remote Add Admin Exploit Author : ajann Contact : : S.Page : http://www.geckovich.com $$ : $39.99 - $19.99 -- FORM NAME="AddUser" METHOD="POST" ACTION="http://target/path/Customize.asp?a=Add" style="word-spacing: 0; margin-top...