CWE-287 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-287/ Sun, 26 Feb 2023 09:11:56 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-287 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-287/ 32 32 CVE-2008-7263 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7263/ Sun, 26 Feb 2023 09:11:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7263/ ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

The post CVE-2008-7263 appeared first on CVE Vulnerability.

]]> ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

The post CVE-2008-7263 appeared first on CVE Vulnerability.

]]> CVE-2008-7179 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7179/ Sun, 26 Feb 2023 09:11:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7179/ OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN_Hora, ADMIN_Logado, and ADMIN_Nome cookies to certain values, as reachable in Admin/index.php.

The post CVE-2008-7179 appeared first on CVE Vulnerability.

]]> OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN_Hora, ADMIN_Logado, and ADMIN_Nome cookies to certain values, as reachable in Admin/index.php.

The post CVE-2008-7179 appeared first on CVE Vulnerability.

]]> CVE-2008-7156 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7156/ Sun, 26 Feb 2023 09:11:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7156/ EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the _groups[] parameter to 2, as demonstrated via backup.php.

The post CVE-2008-7156 appeared first on CVE Vulnerability.

]]> EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the _groups[] parameter to 2, as demonstrated via backup.php.

The post CVE-2008-7156 appeared first on CVE Vulnerability.

]]> CVE-2008-7124 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7124/ Sun, 26 Feb 2023 09:11:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7124/ zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allows remote attackers to gain administrator privileges via a direct request, as demonstrated by adding a new administrator.

The post CVE-2008-7124 appeared first on CVE Vulnerability.

]]> zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allows remote attackers to gain administrator privileges via a direct request, as demonstrated by adding a new administrator.

The post CVE-2008-7124 appeared first on CVE Vulnerability.

]]> CVE-2008-7081 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7081/ Sun, 26 Feb 2023 09:11:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7081/ userHandler.cgi in RaidSonic ICY BOX NAS firmware 2.3.2.IB.2.RS.1 allows remote attackers to bypass authentication and gain administrator privileges by setting the login parameter to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-7081 appeared first on CVE Vulnerability.

]]> userHandler.cgi in RaidSonic ICY BOX NAS firmware 2.3.2.IB.2.RS.1 allows remote attackers to bypass authentication and gain administrator privileges by setting the login parameter to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-7081 appeared first on CVE Vulnerability.

]]> CVE-2008-7086 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7086/ Sun, 26 Feb 2023 09:11:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7086/ Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie cookie to admin.

The post CVE-2008-7086 appeared first on CVE Vulnerability.

]]> Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie cookie to admin.

The post CVE-2008-7086 appeared first on CVE Vulnerability.

]]> CVE-2008-7041 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7041/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7041/ AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin/home.php.

The post CVE-2008-7041 appeared first on CVE Vulnerability.

]]> AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin/home.php.

The post CVE-2008-7041 appeared first on CVE Vulnerability.

]]> CVE-2008-7045 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7045/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7045/ AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll votes via a direct request to admin/resetvote.php.

The post CVE-2008-7045 appeared first on CVE Vulnerability.

]]> AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll votes via a direct request to admin/resetvote.php.

The post CVE-2008-7045 appeared first on CVE Vulnerability.

]]> CVE-2008-7046 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7046/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7046/ AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a different vector than CVE-2008-7045. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-7046 appeared first on CVE Vulnerability.

]]> AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a different vector than CVE-2008-7045. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-7046 appeared first on CVE Vulnerability.

]]> CVE-2008-7047 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7047/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7047/ NatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges to read or delete rooms and messages via a direct request to admin/home.asp.

The post CVE-2008-7047 appeared first on CVE Vulnerability.

]]> NatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges to read or delete rooms and messages via a direct request to admin/home.asp.

The post CVE-2008-7047 appeared first on CVE Vulnerability.

]]>