2222 matches found
Joomla Component Quiz <= 0.81 (tid) SQL Injection Vulnerability
No description provided by source. joomla SQL Injectioncomquizusertstshw AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: comquiz"tid" DORK 2 : allinurl: comquiz EXPLOIT : ALL PASSWORD AND USERNAME UNDE...
joomlamcquiz-sql.txt
joomla SQL Injectioncommcquiz AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: commcquiz "tid" DORK 2 : allinurl: commcquiz ATTACKER CAN SEE PASSWORD AND USERNAME UNDER PAGE...
joomlaako-sql.txt
joomla SQL Injectioncomakogallery AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comakogallery" EXPLOIT :...
Debian Security Advisory DSA 566-1 (cupsys)
The remote host is missing an update to cupsys announced via advisory DSA 566-1. OpenVAS Vulnerability Test $Id: deb5661.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 566-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1452-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-5404
Layton HelpBox 3.7.1 is affected by a username enumeration flaw: authentication responses differ for valid vs. invalid usernames during failed login, enabling remote attackers to determine valid usernames. The CVE description from NVD confirms the issue and impact is limited to credential enumera...
PT-2008-1785 · Pragma · Fortressssh
Name of the Vulnerable Software and Affected Versions: Pragma FortressSSH versions 5.0 Build 4 Revision 293 and earlier Description: The issue allows remote attackers to cause a denial of service, specifically connection slot exhaustion, by flooding the system with SSH connections containing long...
Debian DSA-1452-1 : wzdftpd - denial of service
'k1tk4t' discovered that wzdftpd, a portable, modular, small and efficient ftp server, did not correctly handle the receipt of long usernames. This could allow remote users to cause the daemon to exit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
DSA-1452-1 wzdftpd denial of service
Bulletin has no description...
CVE-2007-6638
March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz...
CVE-2007-6638
March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz...
PHP Real Estate Classifieds "id" SQL Injection
t0pP8uZz & xprog have reported a vulnerability in PHP Real Estate Classifieds, which can be exploited by malicious people to conduct SQL injection attacks. Input passed to the "id" parameter in fullnews.php is not properly sanitised before being used in SQL queries. This can be exploited to...
PR06-11: BEA Plumtree portal search facility leaks usernames to unauthenticated users
PR06-11: BEA Plumtree portal search facility leaks usernames to unauthenticated users Description: BEA Plumtree portal 6.0 is vulnerable to username leakage through the search facility. By performing an advanced search, unauthenticated users can enumerate valid usernames with a single HTTP reques...
Code injection
portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the intxfulltext parameter...
BEA AquaLogic Interaction 6.06.1 Plumtree Portal - Multiple Information Disclosure Vulnerabilities
BEA AquaLogic Interaction 6.06.1 Plumtree Portal - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/26620/info BEA AquaLogic Interaction is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to access valid usernam...
BEA AquaLogic Interaction 6.0/6.1 Plumtree Portal - Multiple Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/26620/info BEA AquaLogic Interaction is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to access valid usernames in the Plumtree portal as well as the server hostname, build date, and server version. Informati...
audit logging of failed logins
Unspecified vulnerability in the linuxauditrecordevent function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party informatio...
CVE-2002-2410
openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information...
CVE-2002-2310
ClickCartPro 4.0 stores the adminuser.db data file under the web document root with insufficient access control on servers other than Apache, which allows remote attackers to obtain usernames and passwords...