ViewVC < 1.0.9 Multiple Vulnerabilities

ViewVC is prone multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100262...

Adobe JRun 4.0 Management Console Multiple Vulnerabilities (APSB09-12)

Adobe JRun is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CMailServer ActiveX Control Multiple Buffer Overflow Vulnerabilities

This host is installed with CMailServer ActiveX Control and is prone to Multiple Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcmailserveractivexmultbofvuln.nasl 3898 2009-08-19 12:45:380Z aug CMailServer ActiveX Control Multiple Buffer Overflow Vulnerabilities Authors:...

2532|Gigs Directory Traversal And SQL Injection Multiple Vulnerabilities

This host is running 2532-Gigs and is prone to Directory Traversal and SQL Injection Vulnerabilities. OpenVAS Vulnerability Test $Id: gb2532gigsmultvulnaug09.nasl 4865 2016-12-28 16:16:43Z teissa $ 2532|Gigs Directory Traversal And SQL Injection Multiple Vulnerabilities Authors: Antu Sanadi...

CMailServer ActiveX Control Multiple Buffer Overflow Vulnerabilities

CMailServer ActiveX Control is prone to Multiple Buffer Overflow vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2532|Gigs <= 1.2.2 Multiple Vulnerabilities - Active Check

2532-Gigs is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:2532gigs:2532gigs"; ifdescription...

Availability of scanner helper tools

This routine checks for the presence of various tools that support the scan engine. If some tools are not accessible for the scan engine, one or more VTs could not be executed properly. The consequence might be that certain vulnerabilities or additional compliance tests are missed because...

Fedora 11 : viewvc-1.1.2-2.fc11 (2009-8507)

CHANGES in 1.1.2: - security fix: validate the 'view' parameter to avoid XSS attack - security fix: avoid printing illegal parameter names and values - add optional support for character encoding detection issue 400 - fix username case handling in svnauthz module issue 419 - fix cvsdbadmin/svnadm...

Fedora 10 : viewvc-1.0.9-1.fc10 (2009-8501)

CHANGES in 1.0.9: - security fix: validate the 'view' parameter to avoid XSS attack - security fix: avoid printing illegal parameter names and values Also includes: Patch by Patrick Monnerat to make allowtar work on F-10. Note that Tenable Network Security has extracted the preceding description...

MDPro Surveys Module SQL Injection Vulnerability

This host is installed with MDPro and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbmdprosqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ MDPro Surveys Module SQL Injection Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

MDPro Surveys Module SQL Injection Vulnerability

MDPro is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP Address Book Multiple SQL Injection Vulnerabilities

This host is running PHP Address Book and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodphpaddressbooksqlinjvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ PHP Address Book Multiple SQL Injection Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod...

PHP Address Book Multiple SQL Injection Vulnerabilities

PHP Address Book is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Snitz Forums 2000 <= 3.4.07 register.asp 'Email' Parameter SQL Injection

The remote version of Snitz Forums 2000 is vulnerable to a SQL injection attack. The domain name of the email address passed to the 'Email' parameter of 'register.asp' is not sanitized before being used in a SQL query. A remote attacker could exploit this to execute arbitrary SQL queries. Note th...

RHEL 5 : tomcat (RHSA-2009:1164)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1164 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. It was discovered that the Red Hat Security...

RealNetworks Helix Server < 13.0.0 Multiple Remote DoS

According to its banner, The remote host is running version 12.x of RealNetworks Helix Server / Helix Mobile Server. Such versions are reportedly affected by multiple issues : - By sending a specially crafted 'RTSP' SETPARAMETERS request with a 'DataConvertBuffer' parameter and either no...

DM FileManager 'album.php' Remote File Inclusion Vulnerability

The host is running DM FileManager and is prone to remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbdmfilemanagerfileincvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ DM FileManager 'album.php' Remote File Inclusion Vulnerability Authors: Sharath S Copyright: Copyright c 2009...

FCKeditor 'CurrentFolder' Arbitrary File Upload

FCKeditor is installed on the remote host. It is an open source HTML text editor that is typically bundled with web applications such Dokeos, GForge, Geeklog, and Xoops, although it can also be installed on its own. The installed version of the software fails to sanitize input passed to the...

DM FileManager <= 3.9.4 RFI Vulnerability - Active Check

DM FileManager is prone to a remote file inclusion RFI vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe ColdFusion FCKeditor 'CurrentFolder' File Upload

The version of Adobe ColdFusion running on the remote host is affected by an arbitrary file upload vulnerability. The installed version ships with a vulnerable version of an open source HTML text editor, FCKeditor, that fails to properly sanitize input passed to the 'CurrentFolder' parameter of t...