Ubuntu 8.04 LTS / 8.10 / 9.04 : backuppc vulnerability (USN-843-1)

It was discovered that BackupPC did not restrict normal users from setting the ClientNameAlias parameter. An authenticated user could exploit this to gain access to unauthorized hosts. This update fixed the issue by preventing normal users from modifying the ClientNameAlias configuration paramete...

FlatPress 'userid' Parameter Local File Include Vulnerability

FlatPress is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow th...

An Image Gallery <= 1.0 Multiple XSS Vulnerabilities - Active Check

An Image Gallery is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

An Image Gallery Directory Traversal Vulnerability

An Image Gallery is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WoltLab Burning Board Cross-Site Request Forgery Vulnerability

This host is running WoltLab Burning Board and is prone to Cross-Site Request Forgery vulnerability. OpenVAS Vulnerability Test $Id: secpodwoltlabburningboardcsrfvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ WoltLab Burning Board Cross-Site Request Forgery Vulnerability Authors: Nikita MR Copyrigh...

ChartDirector for .NET cacheId Parameter Arbitrary File Access

The remote web server uses ChartDirector for .NET, a component for creating and displaying charts. The installed version of ChartDirector fails to sanitize the 'cacheId' parameter before using it to retrieve arbitrary files. An attacker can leverage this issue to view the contents of arbitrary...

SineCMS Remote File Inclusion Vulnerability

This host is installed with SineCMS and is prone to Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbsinecmsfileinclvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ SineCMS Remote File Inclusion Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH...

SineCMS Remote File Inclusion Vulnerability

SineCMS is prone to a remote file inclusion vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Old Y article management system V2. 4 the latest vulnerability analysis-vulnerability warning-the black bar safety net

Keywords: the CheckStrfunction, LoseHtmlfunction, bypassing the comma, wildcards, Line breaks, alternative manual injection, cross-site Technical points: the 1, The broke the old Y the latest of the four vulnerabilities; 2, The use of regular expression“.+?& gt;”of the“.” Meaning of“matching in...

OpenPro Remote File Inclusion Vulnerability

This host is installed with OpenPro and is prone to Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbopenprofileincvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ OpenPro Remote File Inclusion Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

OpenPro Remote File Inclusion Vulnerability

OpenPro is prone to a remote file inclusion vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ProjectButler PHP Remote File Inclusion Vulnerability

ProjectButler is prone to PHP Remote File Inclusion vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenForum 'profile.php' Authentication Bypass Vulnerability

This host is installed with OpenForum and is prone to Authentication Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodopenforumauthbypassvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OpenForum 'profile.php' Authentication Bypass Vulnerability Authors: Nikita MR Copyright: Copyright c 20...

NatterChat Security Bypass Vulnerability

The host is running NatterChat and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodnatterchatsecbypassvul.nasl 5122 2017-01-27 12:16:00Z teissa $ NatterChat Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod, http://www.secpod.co...

NatterChat Security Bypass Vulnerability

NatterChat is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenForum 'profile.php' Authentication Bypass Vulnerability

OpenForum is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NatterChat Multiple XSS And SQL Injection Vulnerabilities

The host is running NatterChat and is prone to multiple XSS and SQL Injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodnatterchatmultxssnsqlinjvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ NatterChat Multiple XSS And SQL Injection Vulnerabilities Authors: Antu Sanadi Copyright:...

NatterChat Multiple XSS And SQL Injection Vulnerabilities

NatterChat is prone to multiple XSS and SQL Injection vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ViewVC Cross Site Scripting and Unspecified Security Vulnerabilities

ViewVC is prone to these security vulnerabilities: - A cross-site scripting vulnerability. - An unspecified security vulnerability that may allow attackers to print illegal parameter names and values. An attacker may leverage theses issue to execute arbitrary script code in the browser of an...

Adobe JRun Management Console Multiple Vulnerabilities

The host is running Adobe JRun and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobejrunmultvulnwin.nasl 7573 2017-10-26 09:18:50Z cfischer $ Adobe JRun Management Console Multiple Vulnerabilities Windows Authors: Sharath S Copyright: Copyright c 2009 SecPod,...