CVE-2009-4674 (buss_ticket_script, sky_hunter_airline_ticket_sale_script)
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field.
Bringing security awareness to the masses
Search this site
Categories
Recommended Sites
Pages
US-CERT Vulnerability Notes
- VU#204055: Blackboard Transact database credentials disclosure
- VU#707943: Microsoft Windows based applications may insecurely load dynamic libraries
- VU#644319: Ghostscript Heap Corruption in TrueType bytecode interpreter
- VU#278785: DevonIT weak authentication and buffer overflow in /usr/bin/tm-console-bin
- VU#320233: Wyse ThinOS LPD service buffer overflow vulnerability
Cyber Security Alerts
Google Search
Blogroll
Under Construction