YABSoft AIHS Cross Site Scripting and SQL Injection Vulnerabilities

The host is running YABSoft AIHS and is prone to Cross-Site Scripting and SQL Injection vulnerabilities OpenVAS Vulnerability Test $Id: gbyabsoftaihsxssnsqlinjvuln.nasl 4970 2017-01-09 15:00:59Z teissa $ YABSoft AIHS Cross Site Scripting and SQL Injection Vulnerabilities Authors: Antu Sanadi...

YABSoft AIHS Cross Site Scripting and SQL Injection Vulnerabilities

YABSoft AIHS is prone to Cross-Site Scripting and SQL Injection vulnerabilities SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 4 : kernel (RHSA-2009:1671)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

RHEL 5 : kernel (RHSA-2009:1670)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Clixint DPI Image Hosting Script Cross Site Scripting Vulnerability

This host is running Flashlight Free Edition and is prone to Cross Site Scripting Vulnerability. OpenVAS Vulnerability Test $Id: gbimagehostingscriptdpixssvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Clixint DPI Image Hosting Script Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyrigh...

Clixint DPI <= 1.1 Image Hosting Script XSS Vulnerability

Image Hosting Script DPI is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpShop shop/flypage SQL Injection

The version of phpShop running on the remote host has a SQL injection vulnerability. Input to the 'productid' parameter of 'shop/flypage' is not properly sanitized. A remote attacker could exploit this to issue arbitrary queries that could be used to control the database or mount further attacks...

Flashlight Free Edition SQL Injection and Directory Traversal Vulnerability

The host is running Flashlight Free Edition and is prone to SQL Injection and Directory Traversal Vulnerability. OpenVAS Vulnerability Test $Id: gbflashlightsqlinjndirtravvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Flashlight Free Edition SQL Injection and Directory Traversal Vulnerability...

Flashlight Free Edition <= 1.0 SQLi and Directory Traversal Vulnerability

Flashlight Free Edition is prone to SQL injection SQLi and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Novell iPrint Client < 5.32 Multiple Overflows

The remote host has Novell iPrint Client installed. The installed version of Novell iPrint Client is affected by multiple buffer overflow vulnerabilities : - A stack-based buffer overflow exists due to insufficient boundary checks on the 'target-frame' parameter. CVE-2009-1568 - A stack-based...

Outreach Project Tool 'CRM_path' Parameter Remote File Inclusion Vulnerability

The host is running Outreach Project ToolOPT and is prone to Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gboutreachprojecttoolrfivuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Outreach Project Tool 'CRMpath' Parameter Remote File Inclusion Vulnerability Authors: Antu Sanadi...

CuteNews/UTF-8 CuteNews Multiple Vulneablities

The host is running CuteNews/UTF-8 CuteNews and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbcutenewsnutf8cutenewsmultvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ CuteNews/UTF-8 CuteNews Multiple Vulneablities Authors: Antu Sanadi Udated By: Antu Sanadi on 2009-12-10 61...

Outreach Project Tool 'CRM_path' Parameter Remote File Inclusion Vulnerability

Outreach Project ToolOPT is prone to a remote file inclusion vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 12 : awstats-6.95-1.fc12 (2009-12370)

Fix security in awredir.pl script by adding a security key required by default. - Enhance security of parameter sanitizing function. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 11 : awstats-6.95-1.fc11 (2009-12457)

Fix security in awredir.pl script by adding a security key required by default. - Enhance security of parameter sanitizing function. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 10 : awstats-6.95-1.fc10 (2009-12444)

Fix security in awredir.pl script by adding a security key required by default. - Enhance security of parameter sanitizing function. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

phpMyFAQ GET Variable Cross-Site-Scripting Vulnerability

This host is installed with phpMyFAQ and is prone to Cross Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodphpmyfaqgetxssvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ phpMyFAQ GET Variable Cross-Site-Scripting Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

smb-psexec NSE Script

Implements remote process execution similar to the Sysinternals' psexec tool, allowing a user to run a series of programs on a remote machine and read the output. This is great for gathering information about servers, running the same tool on a range of system, or even installing a backdoor on a...

TFT Gallery XSS And Directory Traversal Vulnerabilities

This host is installed with TFT Gallery and is prone to Cross- Site Scripting and Directory Traversal vulnerabilities. OpenVAS Vulnerability Test $Id: secpodtftgallerymultvulnnov09.nasl 5122 2017-01-27 12:16:00Z teissa $ TFT Gallery XSS And Directory Traversal Vulnerabilities Authors: Nikita MR...

TFTgallery < 0.13.1 XSS And Directory Traversal Vulnerabilities - Active Check

TFTgallery is prone to cross-site scripting XSS and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...