604 matches found
siteman-pass.txt
-=--------------------ADVISORY-------------------=- Siteman 2.0.x2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Siteman 2.0.x2 -=+ Version: 2.0.x2 -=+ Vendor's URL: http://home.no.net/siteman/ -=+ Platform: Windows\Linux\Unix -=+ Bug type:...
CVE-2006-6949
Conti FTPServer 1.0 Build 2.8 stores user passwords in cleartext in MyServerSettings.ini, which allows local users to obtain sensitive information by reading this file...
Improper access control
AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for db/aspbb.mdb...
CVE-2007-0075
AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for db/aspbb.mdb...
Improper access control
Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for openforum.mdb...
CVE-2007-0075
AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for db/aspbb.mdb...
CVE-2007-0076
CVE-2007-0076 affects Openforum where the backend database (openforum.mdb) is stored under the web root due to insufficient access control. This allows remote attackers to download the database containing user passwords. The CVE is documented with a CVSSv2 base score of 7.5 (HIGH): Network attack...
CVE-2007-0076
Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for openforum.mdb...
CVE-2006-5787
admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passwords via a direct request, possibly related to an authentication issue in admin/chkadmin.php...
CVE-2006-4247
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."...
PHP-Nuke 7.5 - 7.8 (Search) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== PHP-Nuke 7.5 - 7.8 Search Remote SQL Injection Exploit ======================================================== / | | | | | | | / | | | | | |/ \ | | --- | |----| | \ \ || | | | || /...
CVE-2006-0584
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS 5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings...
CVE-2002-2162
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion XOR for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts...
CVE-2002-2162
Cerulean Studios Trillian 0.73 and earlier stores passwords in .ini files in the Trillian directory using weak XOR encryption, enabling local users to access other users’ credentials. Affected product/version: Trillian
pam security update
CentOS Errata and Security Advisory CESA-2005:805 An updated pam package that fixes a security weakness is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. PAM Pluggable Authentication Modules is a system...
FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key
// source: https://www.securityfocus.com/bid/14730/info FileZilla FTP client may allow local attackers to obtain user passwords and access remote servers. The application uses a hard-coded cipher key to decrypt the password, which is stored in an XML file or the Windows Registry. This can allow t...
mybbSQL.pl.txt
!/usr/bin/perl -w use LWP::Simple; Vitem if!$ARGV0 print " MyBB Member.php SQL Injection \n"; print " Coded By \n"; print " \n"; print " + Bug By W7ED - W7EDathotmail.com \n"; print " \n"; print " Exmp:- perl file.pl mybb.net /mybb userid \n"; print " \n"; exit; my $host = 'http://'.$ARGV0; User ...
CVE-2005-2599
Hummingbird FTP for Connectivity 10.0 uses weak encryption trivial encoding to store the user's password in the FTP profile, which allows attackers to gain privileges...
RO CP root exploit
effects all versions of ROCP on an apache based system how it is done first of all i was testing on my friends ragnarok server witch uses ROCP Version 4.3.4a on an apache based system and so i was stunmling through various files i shouldnt have access to such as...