Vulnerabilities > Improper Authentication

DATE CVE VULNERABILITY TITLE RISK
2009-06-22 CVE-2009-2168 Improper Authentication vulnerability in Egyplus 7Ammel 1.0.1
cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypass authentication by providing arbitrary username and password parameters.
network
low complexity
egyplus CWE-287
critical
 9.8
9.8
2009-05-11 CVE-2009-1596 Improper Authentication vulnerability in Igniterealtime Openfire
Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet.
network
low complexity
igniterealtime CWE-287
6.5
6.5