Oempro index.php FormValue_Email Parameter SQL Injection Authentication Bypass

The remote host is running Oempro, a commercial list management and email marketing application written in PHP. The installed version of Oempro fails to sanitize user-supplied input to the 'FormValueEmail' parameter of the 'index.php' script before using it in a database query. An unauthenticated...

Free Directory Script 'API_HOME_DIR' File Inclusion Vulnerability

Free Directory Script is prone to a file inclusion vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sphider query Parameter Cross-Site Scripting Vulnerability

This host is running Sphider and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsphiderqueryparamxssvuln.nasl 4227 2016-10-07 05:45:35Z teissa $ Sphider query Parameter Cross-Site Scripting Vulnerability Authors: Sharath S Copyright: Copyright c 2008 Greenbone...

Sphider query Parameter Cross-Site Scripting Vulnerability

Sphider is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SePortal poll.php SQL Injection Vulnerability

SePortal is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

eTicket pri Parameter Multiple SQLi Vulnerabilities

eTicket is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle WebLogic Server mod_wl Invalid Parameter Remote Overflow (1150354)

The remote web server is using the WebLogic plug-in for Apache modwl, an Apache module included with Oracle formerly BEA WebLogic Server and used to proxy requests from an Apache HTTP server to WebLogic. The version of this plug-in on the remote host is affected by a stack buffer overflow that is...

PHPX news_id SQL Injection Vulnerability (Nov 2008)

PHPX is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

e107 EasyShop plugin easyshop.php SQL Injection Vulnerability

e107 is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:e107:e107"; ifdescription...

Modify the Exploit to experience a local elevation of Privilege fun-vulnerability warning-the black bar safety net

Vulnerability is like 8 months of rain like a short month, it cropped up several! Each of the security sites are constantly in the headlines reported in the latest vulnerability message, the heat as much as the Olympics. But these loopholes, really can for newbies service is few and far between!...

HP System Management Homepage < 2.1.15.210 Unspecified XSS

The remote host appears to be running HP System Management Homepage SMH, a web-based management interface for ProLiant and Integrity servers. The version of HP SMH installed on the remote host fails to sanitize user input to an unspecified parameter and script before using it to generate dynamic...

Fedora 8 : phpMyAdmin-3.0.1.1-1.fc8 (2008-9336)

This update by upstream to phpMyAdmin 3.0.1.1 solves CVE-2008-4775, a XSS issue in pmdpdf.php via db parameter when registerglobals is enabled. - GUI SQL error after sorting a subset - lang Catalan update - lang Russian update - import Temporary uploaded file not deleted - auth Cannot create...

Fedora 9 : phpMyAdmin-3.0.1.1-1.fc9 (2008-9316)

This update by upstream to phpMyAdmin 3.0.1.1 solves CVE-2008-4775, a XSS issue in pmdpdf.php via db parameter when registerglobals is enabled. - GUI SQL error after sorting a subset - lang Catalan update - lang Russian update - import Temporary uploaded file not deleted - auth Cannot create...

Analysis of a php exploit code-exploit warning-the black bar safety net

A few days ago to see a period of interesting code, records. First introduced to the php in a famous function pregreplace, which prototype is: mixed pregreplace mixed pattern, mixed replacement, mixed subject , int limit This function is an interesting place to be: as long as the first parameter...

Free Articles Directory Remote File Inclusion Vulnerability

The remote web server contains a PHP application that is affected by a remote file include vulnerability. Description : The remote host is running Free Articles Directory, a CMS written in PHP. The installed version of Free Articles Directory fails to sanitize user input to the 'page' parameter i...

Woltlab Burning Board SQL injection flaw

The remote web server contains a PHP script that is susceptible to SQL injection attacks. Description: The remote version of Burning Board includes an optional module, the Database module, that fails to properly sanitize the 'fileid' parameter of the 'infodb.php' script, which can be exploited to...

Exhibit Engine toroot Parameter Remote File Include Vulnerability

The remote web server contains a PHP script that is affected by a remote file include issue. Description: The remote web server is running Exhibit Engine, a PHP based photo gallery management system. The version of Exhibit Engine installed on the remote host fails to sanitize input to the 'toroot...

PHP Easy Download admin/save.php Paramater Code Injection Vulnerability

The remote web server contains a PHP script that is affected by a remote code execution issue. Description: The version of PHP Easy Download installed on the remote host fails to sanitize input to the 'moreinfo' parameter before using it in the 'save.php' script. By sending a specially-crafted...

gCards Multiple Vulnerabilities

The remote web server contains a PHP application that is prone to multiple vulnerabilities. Description : The remote host is running gCards, a free electronic greeting card system written in PHP. The installed version of gCards fails to sanitize user input to the 'setLang' parameter in the...

PunBB language Paramater Local File Include Vulnerability

The remote web server contains a PHP script that is affected by a local file include issue. Description: The version of PunBB installed on the remote host fails to sanitize input to the 'language' parameter before storing it in the 'register.php' script as a user's preferred language setting. By...