7847 matches found
Joomla! com_maianmedia Component 'cat' Parameter SQL Injection Vulnerability
This host is installed with Joomla! with Maian Media Silver Component and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbjoomlamaianmediacompsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla! commaianmedia Component 'cat' Parameter SQL Injection...
WordPress TagNinja Plugin 'id' Parameter Cross Site Scripting Vulnerability
WordPress is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Joomla! com_maianmedia Component 'cat' Parameter SQLi Vulnerability
Joomla! with Maian Media Silver Component is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Majordomo 2 _list_file_get() Function Traversal Arbitrary File Access
The version of Majordomo 2 on the remote host fails to sanitize input to the 'extra' parameter of the 'mjwwwusr' script before using it to return the contents of a file. An attacker can leverage this issue using a directory traversal sequence to view arbitrary files on the affected host within th...
Dokeos 'style' Parameter Cross Site Scripting Vulnerability
Dokeos is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal...
Dokeos <= 1.8.6.2 'style' Parameter XSS Vulnerability
Dokeos is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
PivotX < 2.3.2 Multiple XSS Vulnerabilities
PivotX is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SigPlus Pro ActiveX Control LCDWriteString() Method HexString Parameter Overflow
The SigPlus Pro ActiveX control, used for electronic signature integration with Topaz signature pads and installed on the remote Windows host, is earlier than 3.95. A stack-based buffer overflow in such versions reportedly allows execution of arbitrary code via an overly long value for the...
Escortservice 'custid' Parameter SQL Injection Vulnerability
Escortservice is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the...
WordPress RSS Feed Reader Plugin 'rss_url' Parameter Cross Site Scripting Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...
PHP Link Directory Software 'sbcat_id' Parameter SQL Injection Vulnerability
PHP Link Directory Software is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
arachni (NASL wrapper)
This plugin uses arachni ruby command line to find web security issues. See the preferences section for arachni options. Note that OpenVAS is using limited set of arachni options. Therefore, for more complete web assessment, you should use standalone arachni tool for deeper/customized checks...
CA20101231-01: Security Notice for CA ARCserve D2D (updated)
CA20101231-01: Security Notice for CA ARCserve D2D Issued: December 31, 2010 Last Updated: January 26, 2011 CA Technologies support is alerting customers to a security risk with CA ARCserve D2D. A vulnerability exists that can allow a remote attacker to execute arbitrary code. CA has issued an...
CentOS 4 : kernel (CESA-2010:0936)
Updated kernel packages that fix two security issues and multiple bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Joomla! Cross Site Scripting Vulnerability
The host is running Joomla! and is prone to Cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlaxssvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Joomla! Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks GmbH,...
Joomla! XSS Vulnerability
Joomla! is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...
PHP Coupon Script 'page' Parameter SQL Injection Vulnerability
PHP Coupon Script is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. PHP Coupon Script 6.0 is...
web@all 'url' Parameter Cross Site Scripting Vulnerability
web@all is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to...
RHEL 5 : kernel (RHSA-2011:0163)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0163 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: A flaw was foun...
SurgeMail SurgeWeb Cross Site Scripting Vulnerability
The host is running SurgeMail and is prone to Cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsurgemailsurgewebxssvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ SurgeMail SurgeWeb Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone...