[Full-disclosure] Microsoft Windows Active Directory Logon Hours User Enumeration Weakness

Windows Server 2003 can be configured http://support.microsoft.com/kb/816666 to restrict the hours and days that a user may log on to a Windows Server 2003 domain. This could lead to username enumeration. Issue:- Microsoft Windows Active Directory Username Enumeration Criticality:- Less Critical...

GLSA-200701-10 : WordPress: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200701-10 WordPress: Multiple vulnerabilities When decoding trackbacks with alternate character sets, WordPress does not correctly sanitize the entries before further modifying a SQL query. WordPress also displays different error...

WordPress: Multiple vulnerabilities

Background WordPress is a popular personal publishing platform with a web interface. Description When decoding trackbacks with alternate character sets, WordPress does not correctly sanitize the entries before further modifying a SQL query. WordPress also displays different error messages in...

BMC Remedy Action Request System user enumeration vulnerability

Messages for invalid password and invalid user name are different...

Remedy Action Request System 5.01.02 - User Enumeration

======================================================= Remedy Action Request System User Enumeration ======================================================= Davide Del Vecchio Adv11 Discovered in: 08/01/2007 Version affected: Remedy Action Request System 5.01.02 Patch 1267. The same vulnerable...

CVE-2006-2676

Dispatch.cgi/user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames...

CVE-2006-2676

CVE-2006-2676 affects SiteScape Forum 7.2 and possibly earlier. The vulnerability involves Dispatch.cgi/_user/uservCard/ returning responses that differ in a way that allows remote attackers to enumerate valid usernames. The NVD entry lists a CVSS v2 base score of 5.0 (MEDIUM), with network attac...

CVE-2006-2676

Dispatch.cgi/user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames...

vuBB <= 0.2 (Cookie) Final Remote SQL Injection Exploit (mq=off)

No description provided by source. !/usr/bin/perl print q ---------------------------------------------------------------------- vuBB =0.2 Final Remote SQL Injection cookies Exploit exploit discovered and coded by KingOfSKa https://contropotere.netsons.org...

phpWebSite 0.10.0-full - topics.php SQL Injection

phpWebSite 0.10.0-full - topics.php SQL Injection !/usr/bin/perl advisory sent in by SnIpErSA selfar2002athotmail.com http://www.target.com/topics.php?op=viewtopic&topic=-1%20Union%20select%20name,name,pass,name%20From%20users%20where%20uid=1 ported by str0ke milw0rm.com from x97Rangs code RST/GH...

CVE-2006-0129

CVE-2006-0129 affects Rockliffe MailSite prior to 7.0.3.1, specifically the Mail Management Agent (MAILMA) . The vulnerability arises because the server generates different responses based on whether a username is valid, allowing remote attackers to enumerate valid usernames via TCP port 106. The...

Multiple Rockliffe Mailsite mail server vulnerabilities

IMAP server user enumaration and directory traversal...

[Full-disclosure] Rockliffe Mailsite User Enumeration Flaw

Synopsis: Rockliffe's Mailsite Mail Management Server User Enumeration Flaw. Product: Rockliffe Mailsite http://www.rockliffe.com Version: Confirmed on Mailsite = 7.0.3.1 Author: Josh Zlatin-Amishav Date: January 4, 2006 Background: Rockliffe MailSite secure email server software and MailSite MP...

ProFTPD < 1.2.11 User Enumeration Vulnerability

ProFTPD is prone to a user enumeration vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:proftpd:proftpd"; Ref: LS...

[SA17383] Ringtail CaseBook Cross-Site Scripting and Username Enumeration

TITLE: Ringtail CaseBook Cross-Site Scripting and Username Enumeration SECUNIA ADVISORY ID: SA17383 VERIFY ADVISORY: http://secunia.com/advisories/17383/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: Ringtail CaseBook 6.x...

Juniper Netscreen VPN user enumeration

Different reply for existing user in IKE...

CVE-2005-2591

Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown vectors, aka the "User Enumeration" vulnerability...

CVE-2005-2591

Parlano MindAlign 5.0 and later versions are reported to be vulnerable to a User Enumeration flaw that allows remote attackers to list valid users via unknown vectors. The description confirms the affected product line but does not provide concrete exploit details, affected components, root cause...

CVE-2005-2591

Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown vectors, aka the "User Enumeration" vulnerability...

Several Vulnerability Issues Affecting the MindAlign

NISCC Vulnerability Advisory 356752/NISCC/MINDALIGN Several Vulnerability Issues Affecting the MindAlign Product Version Information Advisory Reference 356752/NISCC/MINDALIGN Release Date 12 August 2005 Last Revision 12 August 2005 Version Number 1.0 What is Affected? The following versions of th...