Netbilling NBMEMBER Script - Information Disclosure

Netbilling NBMEMBER Script - Information Disclosure source: https://www.securityfocus.com/bid/11504/info Netbilling 'nbmember.cgi' script is reported prone to an information disclosure vulnerability. This issue may allow remote attackers to gain access to user authentication credentials and...

GLSA-200410-06 : CUPS: Leakage of sensitive information

The remote host is affected by the vulnerability described in GLSA-200410-06 CUPS: Leakage of sensitive information When printing to a SMB-shared printer requiring authentication, CUPS leaks the user name and password to a logfile. Impact : A local user could gain knowledge of sensitive...

[SA12736] CUPS Logfile User Credentials Disclosure

TITLE: CUPS Logfile User Credentials Disclosure SECUNIA ADVISORY ID: SA12736 VERIFY ADVISORY: http://secunia.com/advisories/12736/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: CUPS 1.x http://secunia.com/product/921/ DESCRIPTION: Gary Smith has...

PBLang v4.60 bug

Network security team nst.e-nex.com Title: PBLang v4.60 Bug found by: тёмыч Date: 29.09.2004 Web: http://pblang.drmartinus.de 1. Вы должны быть зарегистрированым юзэром. 2. Заходите в отдел PM Private Messages 3. Отошлите себе меседж. 4. Просмотрите пришедший месидж и с лева нажмите на Reply...

Serendipity 0.7-beta1 SQL Injection Proof of Concept

No description provided by source. Proof of Concept 1 ------------------ Usage: ./sersqlipoc.sh URLtoSerendipityWeblog sersqlipoc.sh ---------8-----------8------------- !/bin/sh echo -n "Username: " curl -I -s...

exploit in PHPBB 2010

explode: form action="" method="post" URL до форума:input type="text" name="url" size="50" value="http://www.phpbbexample.ru/forum/"br Колличество запросов:select name="select" size="1" option value="10"10/option option value="100"100/option option value="200"200/option option value="500"500/opti...

postgresql-contrib -- insecure temporary file creation

The makeoidjoinscheck script in the PostgreSQL RDBMS has insecure handling of temporary files, which could lead to an attacker overwriting arbitrary files with the credentials of the user running the makeoidjoinscheck script...

Nagl XOOPS Dictionary Module 1.0 - Multiple Cross-Site Scripting Vulnerabilities

Nagl XOOPS Dictionary Module 1.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11064/info Reportedly the XOOPS Dictionary Module by Nagle is affected by multiple cross-site scripting vulnerabilities. This issue is due to a failure of the application to...

PowerPortal modules/private_messages/index.php Multiple Parameter XSS

The remote host is using PowerPortal, a content management system, written in PHP. A vulnerability exists in the remote version of this product that may allow a remote attacker to inject arbitrary HTML tags in when sending a private message to a victim user of the remote portal. An attacker may...

Mandrake Linux Security Advisory : mozilla (MDKSA-2004:021)

A number of vulnerabilities were discovered in Mozilla 1.4 : A malicious website could gain access to a user's authentication credentials to a proxy server. Script.prototype.freeze/thaw could allow an attacker to run arbitrary code on your computer. A vulnerability was also discovered in the NSS...

SquirrelMail 1.x - Email Header HTML Injection

SquirrelMail 1.x - Email Header HTML Injection source: https://www.securityfocus.com/bid/10439/info SquirrelMail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings. An...

OpenBB 1.0.x - Private Message Disclosure

source: https://www.securityfocus.com/bid/10217/info It has been reported that OpenBB is affected by a private message disclosure vulnerability. This issue is due to a design error that fails to validate user credentials. This issue might allow an attacker to read arbitrary private messages poste...

Trillian Pro < 2.01 - Design Error

Trillian Pro Design Error Vendor: Cerulean Studios Product: Trillian Pro Version: !-- var username; username='plaintextusernamehere'; var password; password='plaintextpasswordhere'; function submit document.getElementById'login'.value=username; d...

YaBB SE 1.5.x - Arbitrary File Deletion

source: https://www.securityfocus.com/bid/9774/info It has been reported that YaBB SE may be prone to multiple vulnerabilities due to improper input validation. The issues may allow an attacker to carry out SQL injection and directory traversal attacks. Successful exploitation of these issues may...

YaBB SE 1.5.x - Multiple SQL Injections

source: https://www.securityfocus.com/bid/9774/info It has been reported that YaBB SE may be prone to multiple vulnerabilities due to improper input validation. The issues may allow an attacker to carry out SQL injection and directory traversal attacks. Successful exploitation of these issues may...

Multiple Mac OS X AFP client bugs

Cryptographic weakness allows interception of users credential via connection proxying...

Microsoft Exchange Server 2003 fails to assign user credentials to proper mailbox

Overview A flaw in the authentication mechanism that Microsoft Exchange Server 2003 uses for Outlook Web Access users in some configurations could expose another user's mailbox. Description Outlook Web Access OWA is a feature of Microsoft Exchange Server 2003. By using OWA, a server that is runni...

CVE-2004-1786

PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb...

ASP-Nuke 1.01.21.3 - Remote User Database Access

ASP-Nuke 1.01.21.3 - Remote User Database Access source: https://www.securityfocus.com/bid/9355/info A problem has been identified in ASP-Nuke when user credentials are stored on a system. Because of this, an attacker may be able to gain unauthorized access to sensitive information...

ASPApp PortalApp - Remote User Database Access

ASPApp PortalApp - Remote User Database Access source: https://www.securityfocus.com/bid/9354/info A problem has been identified in ASPapp PortalApp when user credentials are stored on a system. Because of this, an attacker may be able to gain unauthorized access to sensitive information...