ManageEngine SupportCenter Plus FileDownload.jsp path Parameter Traversal Arbitrary File Access

The installed version of ManageEngine SupportCenter Plus fails to sanitize user-supplied input to the 'path' parameter of the 'workorder/FileDownload.jsp' script of directory traversal sequences when 'module' is set to 'Request' before using it to return the contents of a file. An unauthenticated...

WordPress WPtouch URL Redirection Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

IBM Web Application Firewall Bypass

Exploit for windows platform in category remote exploits IBM Web Application Firewall Bypass Version: 1.0 Vendor: IBM Product: IBM Web Application Firewall These capabilities are included through SiteProtector 7.0 and later software within IBM Security Network IPS GX products, IBM Security Server...

IBM Web Application Firewall - Bypass

IBM Web Application Firewall - Bypass Trustwave's SpiderLabs Security Advisory TWSL2011-006: IBM Web Application Firewall Bypass https://www.trustwave.com/spiderlabs/advisories/TWSL2011-006.txt Published: 2011-06-21 Version: 1.0 Vendor: IBM Product: IBM Web Application Firewall These capabilities...

IBM Web Application Firewall - Bypass

Trustwave's SpiderLabs Security Advisory TWSL2011-006: IBM Web Application Firewall Bypass https://www.trustwave.com/spiderlabs/advisories/TWSL2011-006.txt Published: 2011-06-21 Version: 1.0 Vendor: IBM Product: IBM Web Application Firewall These capabilities are included through SiteProtector 7....

IBM Web Application Firewall Bypass

Trustwave's SpiderLabs Security Advisory TWSL2011-006: IBM Web Application Firewall Bypass https://www.trustwave.com/spiderlabs/advisories/TWSL2011-006.txt Published: 2011-06-21 Version: 1.0 Vendor: IBM Product: IBM Web Application Firewall These capabilities are included through SiteProtector 7....

Joomla Minitek FAQ Book < 1.4 SQLi Vulnerability - Active Check

Joomla Minitek FAQ Book component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla Minitek FAQ Book 'id' Parameter SQL Injection Vulnerability

This host is running Joomla Minitek FAQ Book component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlaminiteksqlinjvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ Joomla Minitek FAQ Book 'id' Parameter SQL Injection Vulnerability Authors: Madhuri D Copyright:...

MS11-051: Vulnerability in Active Directory Certificate Services Web Enrollment Could Allow Elevation of Privilege (2518295)

A reflected or non-persistent cross-site scriting vulnerability exists in the version of Active Directory Certificate Services Web Enrollment installed on the remote Windows host due to improper validation of a request parameter. By using a specially crafted link, an attacker could leverage the...

WordPress GD Star Rating Plugin 'votes' Parameter SQL Injection Vulnerability

WordPress GD Star Rating Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla! com_joomnik Component 'album' Parameter SQL Injection Vulnerability

This host is installed with Joomla! with Joomnik Gallery Component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlajoomnikcompalbumparamsqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Joomla! comjoomnik Component 'album' Parameter SQL Injection Vulnerabilit...

Icinga 'expand' Parameter XSS Vulnerability

Icinga is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:icinga:icinga";...

Nagios < 3.3.1 'expand' Parameter XSS Vulnerability - Active Check

Nagios is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagios";...

EGroupware Multiple Vulnerabilities (May 2011) - Active Check

EGroupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:egroupware:egroupware";...

Joomla! com_joomnik Component 'album' Parameter SQLi Vulnerability

Joomla! with Joomnik Gallery Component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

vBulletin vBExperience 'sortorder' Parameter Cross Site Scripting Vulnerability

vBulletin vBExperience is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user- supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow th...

vBulletin vBExperience 3.0 'sortorder' Parameter XSS Vulnerability - Active Check

vBulletin vBExperience is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Andy's PHP Knowledgebase 'step5.php' Remote PHP Code Execution Vulnerability

This host is running Andy's PHP Knowledgebase and is prone to remote PHP code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodaphpkbcodeexecvuln.nasl 5840 2017-04-03 12:02:24Z cfi $ Andy's PHP Knowledgebase 'step5.php' Remote PHP Code Execution Vulnerability Authors: Sooraj KS...

Joomla Component 'com_maplocator' SQLi Vulnerability

Joomla with commaplocator component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PHPortfolio 'photo.php' SQL Injection Vulnerability

PHPortfolio is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...