FunkBoard CF0.71 - profile.php Remote User Pass Change

FunkBoard CF0.71 - profile.php Remote User Pass Change /str0ke -- Profile User Name ajann Membership Number 247 First Registered Sat 03 Jun 2006 at 09:20:14 pm Last Login Sat 03 Jun 2006 at 09:21:45 pm Number of posts 0...

CVE-2006-2662

VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges...

Information disclosure

admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote attackers to edit arbitrary posts via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Design/Logic Flaw

VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges...

CVE-2006-2773

admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote attackers to edit arbitrary posts via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

qjForum - 'member.asp' SQL Injection

Title : qjForummember.asp SQL Injection Vulnerability Author : ajann greetz : Nukedx,TheHacker Dork : "qjForum" Exploit: Login before injection. http://target/path/member.asp?uName='union%20select%200,0,0,username,0,0,pd,email,0,0,0,0,0,0,0,0,0,0,0,0%20from%20member milw0rm.com 2006-05-26...

Code injection

Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers...

CVE-2006-2540

Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers...

CVE-2006-2540

The CVE-2006-2540 issue affects a Diesel PHP Job Site component (install.php) in which sensitive data (user credentials) is sent to an email address controlled by the product developers, causing a privacy leak. The published description identifies a leakage of credentials and other sensitive info...

CVE-2006-2540

Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers...

Improper access control

Dayfox Blog 2.0 and earlier stores user credentials in edit/slogusers.txt under the web document root with insufficient access control, which allows remote attackers to gain privileges...

CVE-2006-2522

Dayfox Blog 2.0 and earlier stores user credentials in edit/slogusers.txt under the web document root with insufficient access control, which allows remote attackers to gain privileges...

CVE-2006-2522

Dayfox Blog 2.0 and earlier stores user credentials in edit/slogusers.txt under the web document root with insufficient access control, which allows remote attackers to gain privileges...

CVE-2006-2522

CVE-2006-2522 affects Dayfox Blog 2.0 and earlier. The credential store is kept in edit/slog_users.txt at the web document root with insufficient access control, enabling remote attackers to gain privileges. The connected sources confirm this direct exposure of user credentials and the resulting ...

CVE-2006-2430

CVE-2006-2430 affects IBM WebSphere Application Server: versions 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7. The vulnerability arises because user credentials are recorded in plaintext in addNode.log, which can allow attackers to gain privileges. Supported connected documents c...

CVE-2006-2430

IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in addNode.log, which allows attackers to gain privileges...

[SA19569] Hosting Controller "forum.mdb" Exposure of User Credentials

TITLE: Hosting Controller "forum.mdb" Exposure of User Credentials SECUNIA ADVISORY ID: SA19569 VERIFY ADVISORY: http://secunia.com/advisories/19569/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Hosting Controller 6.x...

gallery203.php.txt

!/usr/bin/php -q -d shortopentag=on autisticiorg \r\n"; echo "site: http://retrogod.altervista.org \r\n\r\n"; echo "- works with registerglobals = On and magicquotesgpc = Off \r\n"; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$...

HitHost 1.0 - viewuser.php?hits Cross-Site Scripting

HitHost 1.0 - viewuser.php?hits Cross-Site Scripting source: https://www.securityfocus.com/bid/17025/info HitHost is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage thes...

TotalECommerce <= 1.0 (index.asp id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= TotalECommerce http://victim/dir/index.asp?secao=PageID&id=SQL EXAMPLE 1 -...