Password Protect XSS and SQL-Injection vulnerabilities.

CRIOLABS - Software: Password protect - Type: User Authentication - Company: Web Animations - Date: 30-8-2004 Software Software: Password protect Versions: All Languaje: ASP Plataforms: Win nt, 2000, xp Web: http://www.webanimations.com.au/ The ultimate protection including unlimited user names a...

passprotect.txt

CRIOLABS - Software: Password protect - Type: User Authentication - Company: Web Animations - Date: 30-8-2004 Software Software: Password protect Versions: All Languaje: ASP Plataforms: Win nt, 2000, xp Web: http://www.webanimations.com.au/ The ultimate protection including unlimited user names a...

CVE-2002-0444

Technical details about CVE-2002-0444 are not provided in the supplied documents. The description notes that Windows 2000 Terminal Server SYSVOL policy application can fail when connections exceed a maximum; monitor for official updates.

[SA12407] Password Protect Multiple Vulnerabilities

TITLE: Password Protect Multiple Vulnerabilities SECUNIA ADVISORY ID: SA12407 VERIFY ADVISORY: http://secunia.com/advisories/12407/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Exposure of system information, Exposure of sensitive information WHERE: From remote...

SWsoft Plesk Reloaded 7.1 - 'Login_name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11024/info It is reported that Plesk Reloaded may be affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a...

OpenFTPD <= 0.30.1 (message system) Remote Shell Exploit

Exploit for linux platform in category remote exploits ======================================================== OpenFTPD = 0.30.1 message system Remote Shell Exploit ======================================================== / shouts to mitakeet :D exploit for openftpd format string bug. tested on...

Comersus Cart 5.0 - SQL Injection

source: https://www.securityfocus.com/bid/10824/info Comersus Cart is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL query. The problem presents itself...

FreeBSD : Gallery 1.4.3 and ealier user authentication bypass (54)

The following package needs to be updated: gallery %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg253ea131bd1211d8b07100e08110b673.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

BasiliX Webmail 1.1 - Email Header HTML Injection

BasiliX Webmail 1.1 - Email Header HTML Injection source: https://www.securityfocus.com/bid/10662/info BasiliX Webmail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings...

SqWebMail 4.0.4.20040524 - Email Header HTML Injection

source: https://www.securityfocus.com/bid/10588/info SqWebMail is reported to be prone to an email header HTML injection vulnerability. This issue presents itself due to a failure of the application to properly sanitize user-supplied email header strings. The problem presents itself when an...

SqWebMail 4.0.4.20040524 - Email Header HTML Injection

SqWebMail 4.0.4.20040524 - Email Header HTML Injection source: https://www.securityfocus.com/bid/10588/info SqWebMail is reported to be prone to an email header HTML injection vulnerability. This issue presents itself due to a failure of the application to properly sanitize user-supplied email...

Gallery 1.4.3 and ealier user authentication bypass

A flaw exists in Gallery versions previous to 1.4.3-pl1 and post 1.2 which may give an attacker the potential to log in under the "admin" account. Data outside of the gallery is unaffected and the attacker cannot modify any data other than the photos or photo albums...

[Full-Disclosure] Mdaemon 7.0.1 IMAP overflow.

Let it be known that this bug is after authentication "postauth" and therefore useless. In the current version of Mdaemon from ALTN there exists an easy to exploit, run-of-the-mill stack overflow. By authenticating and sending a large argument to the STATUS command in the IMAP component, a buffer...

DoS против MDaemon &#40;imap buffer overflow&#41;

Переполнение буфера в команде Select пользователь должен быть авторизован...

DoS in NETFile FTP/Web Server

Donato Ferrante Application: Fastream NETFile FTP/Web Server http://www.fastream.com/ Version: 6.5.1.980 Bug: Denial Of Service Date: 19-Apr-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato...

[waraxe-2004-SA#017 - User-level authentication bypass in phpnuke 6.x-7.2]

================================================================================ waraxe-2004-SA017 ================================================================================ User-level authentication bypass in phpnuke 6.x-7.2...

cPanel 5/6/7/8/9 - 'dir' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9853/info It has been reported that cPanel may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to insufficient sanitization of user-supplie...

YaBB SE 1.5.x - Arbitrary File Deletion

YaBB SE 1.5.x - Arbitrary File Deletion source: https://www.securityfocus.com/bid/9774/info It has been reported that YaBB SE may be prone to multiple vulnerabilities due to improper input validation. The issues may allow an attacker to carry out SQL injection and directory traversal attacks...

Calife heap corrupt / potential local root exploit

Calife heap corrupt / potential local root exploit -------------------------------------------------- by Leon Juranic a.k.a DownBload [email protected] / II-Labs Version affectedtested: calife-2.8.4c and calife-2.8.5 - calife can be found at packages.debian.org, FreeBSD 5.0 security, ... From...

SandSurfer < 1.7.0 User Authentication Bypass

The remote host is running SandSurfer, a web-based time keeping application. A vulnerability has been disclosed in all versions of this software, up to version 1.6.5 included that could allow an attacker to access the application without authenticating. %NASLMINLEVEL 70300 C Tenable Network...