HTML Parser Detection (Linux/Unix SSH Login)

SSH login-based detection of HTML Parser. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.801038"...

HTML Parser Version Detection (Linux)

The script detects the installed version of HTML Parser and sets the reuslt into KB. OpenVAS Vulnerability Test $Id: gbhtmlparserdetectlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ HTML Parser Version Detection Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CGI Generic SQL Injection (HTTP Headers)

By sending specially crafted HTTP headers to one or more CGI scripts hosted on the remote web server, Nessus was able to cause an error in the underlying database. This error suggests that the CGI scripts are prone to SQL injection attack. An attacker may be able to exploit this issue to bypass...

Sahana 'mod' Parameter Local File Disclosure Vulnerability

Sahana is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further...

RHEL 5 : kernel (RHSA-2009:1548)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

TFTgallery 'album' Parameter Cross Site Scripting Vulnerability

TFTgallery is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the...

OpenDocMan Multiple XSS and SQL Injection Vulnerabilities

This host is running OpenDocMan and is prone to multiple Cross-Site Scripting and SQL Injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodopendocmanxssnsqlinjvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OpenDocMan Multiple XSS and SQL Injection Vulnerabilities Authors: Sharath S...

OpenDocMan Multiple XSS and SQL Injection Vulnerabilities

OpenDocMan is prone to multiple Cross-Site Scripting and SQL Injection vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Ping Host

This detection determines whether a remote host is alive by getting a response when sending a request. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Xerver HTTP Server <= 4.32 XSS Vulnerability

Xerver HTTP Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Xerver HTTP Server <= 4.32 Directory Traversal Vulnerability

Xerver HTTP Server is prone to a directory traversal vulnerability Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

BLOB Blog System 'postid' Parameter XSS Vulnerability

This host is running BLOB Blog System and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbblobblogsystempostidxssvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ BLOB Blog System 'postid' Parameter XSS Vulnerability Authors: Nikita MR Copyright: Copyright c 2009...

bloofoxCMS 'search' Parameter Cross Site Scripting Vulnerability

bloofoxCMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input passed through the 'search' parameter. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

BLOB Blog System 'postid' Parameter XSS Vulnerability

BLOB Blog System is prone to a Cross-Site Scripting vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MyMsg 'profile.php' SQL Injection Vulnerability

This host is installed with MyMsg and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbmymsgprofilesqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ MyMsg 'profile.php' SQL Injection Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

MyMsg 'profile.php' SQL Injection Vulnerability

MyMsg is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Meeting Room Booking System SQL Injection Vulnerability

This host is installed with Meeting Room Booking System and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbmrbssqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Meeting Room Booking System SQL Injection Vulnerability Authors: Nikita MR Copyright: Copyright c 2009...

PHP Live! 'deptid' Parameter SQL Injection Vulnerability

PHP Live! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlyin...

PHP Live! 'deptid' Parameter SQL Injection Vulnerability

PHP Live! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

linkSpheric 'viewListing.php' SQL Injection Vulnerability

The host is running linkSpheric and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gblinksphericviewlistingsqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ linkSpheric 'viewListing.php' SQL Injection Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbon...