Gnat-TGP 'DOCUMENT_ROOT' Parameter RFI Vulnerability

Gnat-TGP is prone to a remote file include RFI vulnerability SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla! / Mambo Component 'view' Parameter Local File Include

The remote host contains a component for Joomla! or Mambo that fails to sanitize user-supplied input to the 'view' parameter in a GET request before using it to include PHP code. Regardless of the PHP 'registerglobals' setting, an unauthenticated, remote attacker can exploit this issue to disclos...

Phptroubleticket 'vedi_faq.php' SQL Injection Vulnerability

PHP Trouble Ticket is prone to SQL injection vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tracking Requirements And Use Cases Cross Site Scripting vulnerability

Tracking Requirements and Use Cases is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

OpenCart <= 1.3.2 'page' Parameter SQLi Vulnerability

OpenCart is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

OpenCart 'page' Parameter SQL Injection Vulnerability

OpenCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

Xoops Celepar Multiple Vulnerabilities

This host is running Xoops Celepar and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbxoopsceleparmultvuln.nasl 7144 2017-09-15 12:14:43Z cfischer $ Xoops Celepar Multiple Vulnerabilities Authors: Rachana Shetty Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Discloser 'more' Parameter SQL Injection Vulnerability

Discloser is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Netpet CMS <= 1.9 Directory Traversal Vulnerability

Netpet CMS is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:netpet:netpetcms";...

Xoops Celepar <= 2.2.4 Multiple Vulnerabilities - Active Check

Xoops Celepar is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Netpet CMS Directory Traversal Vulnerability

The host is running Netpet CMS and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodnetpetcmsdirtravvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Netpet CMS Directory Traversal Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

TT Web Site Manager 'tt_name' Remote SQL Injection Vulnerability

The host is running TT web site manager and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodttwmsqlinjvuln.nasl 7806 2017-11-17 09:22:46Z cfischer $ TT Web Site Manager 'ttname' Remote SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010...

Discloser 'more' Parameter SQL Injection Vulnerability

The host is running Discloser and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddisclosersqlinjvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Discloser 'more' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

OSSIM 'file' Parameter Directory Traversal Vulnerability

OSSIM is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Tribisur Multiple Vulnerabilities

Tribisur is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SAP MaxDB 'serv.exe' Unspecified RCE Vulnerability (1409425)

SAP MaxDB is prone to an unspecified remote code execution RCE vulnerability because it fails to sufficiently validate user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

OSSIM download.php Directory Traversal

The version of OSSIM hosted on the remote host has a directory traversal vulnerability. Input to the 'file' parameter of the 'ossim/repository/download.php' script is not properly sanitized. A remote attacker could exploit this to download arbitrary files, subject to the privileges under which th...

Samba 'CAP_DAC_OVERRIDE' File Permission Security Bypass

The remote Samba server has a flaw that causes all smbd processes, when libcap support is enabled, to inherit 'CAPDACOVERRIDE' capabilities, which in turn causes all file system access to be allowed even when permissions should have been denied. A remote, authenticated attacker can exploit this...

ispCP Omega 'net2ftp_globals[application_skinsdir]' Parameter Remote File Include Vulnerability

ispCP Omega is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a...

ispCP Omega 'net2ftp_globals[application_skinsdir]' Parameter Remote File Include Vulnerability

ispCP Omega is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a...