username password software vulnerabilities

Searching username password software vulnerabilities

Windows NT FTP server (WFTP) with the guest acc

Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.

BackWeb client stores the username and password

BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password.

FTP Explorer uses weak encryption for storing t

FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.

Crystal Reports, when displaying data for a pas

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.

Castelle FaxPress, possibly 6.3 and other versi

Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes Faxpress to leak the correct username and password in plaintext in an error event.

GroupWise 6, when using LDAP authentication and

GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password.

WorkforceROI Xpede 4.1 allows remote attackers

WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks.

SQL injection vulnerability in Ruslan Bui

SQL injection vulnerability in Ruslan Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.

AppServ 2.5.x and earlier installs a default us

AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.

Unspecified vulnerability in cmdline.c in proxy

vulnerability | proxytunnel | Unspecified | cmdlinec |

Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users.

The telnet daemon in UTStarcom F1000 VOIP WIFI

The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username "target" and password "password", which allows remote attackers to gain full access to the system.

BEA WebLogic Server and WebLogic Express 8.1 SP

BEA WebLogic Server and WebLogic Express 8.1 SP5 and earlier, and 7.0 SP6 and earlier, when using username/password authentication, does not lock out a username after the maximum number of invalid login attempts, which makes it easier for remote attackers to guess the password.

PHP Upload Center stores password hashes under

PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for the upload/users/[USERNAME] file.

na-img-4.0.34.bin for the IP3 Networks NetAcces

na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has a default username of admin and a default password of admin.

The pswd.js script relies on the client to calc

The pswd.js script relies on the client to calculate whether a username and password for a server match hard-coded hashed values, which allows remote attackers to obtain a username and password by downloading pswd.js and conducting brute-force offline attacks.

IBM Client Security Password Manager stores and

IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page.

Cisco 2700 Series Wireless Location Appliances

Cisco |

Cisco 2700 Series Wireless Location Appliances before 2.1.34.0 have a default administrator username "root" and password "password," which allows remote attackers to obtain administrative privileges, aka Bug ID CSCsb92893.

The "forgot password" function in OneOrZero Hel

The "forgot password" function in OneOrZero Helpdesk before 1.6.5.4 generates insecure passwords by concatenating the current timestamp with the username, which allows remote attackers to gain access as an arbitrary user by requesting a password reset.

projectserver/logon/pdsrequest.asp in Microsoft

projectserver/logon/pdsrequestasp | Microsoft | Project | Server |

projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password for a SQL database via a GetInitializationData request, which includes the information in the UserName and Password tags of the response.

DISPUTED SQL injection vulnerability in

** DISPUTED ** SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. NOTE: CVE disputes this issue, because 'username' does not exist, and the password is not used in any queries.

Software vulnerabilities results 1 to 20 of 1331

Page: 12 3 4 5...67 ►

username password software vulnerabilities

vulnerabilities.aspcode.net

Searching username password software vulnerabilities