phpScheduleIt reserve.php start_date Parameter Arbitrary Command Injection

The version of phpScheduleIt installed on the remote host fails to sanitize user-supplied input to the 'startdate' parameter of the 'reserve.php' script before using it in an 'eval' function call. Provided PHP's 'magicquotesgpc' is disabled, an unauthenticated, remote attacker can leverage this...

Trend Micro OfficeScan Server cgiRecvFile.exe Buffer Overflow Vulnerability.

This Remote host is installed with Trend Micro OfficeScan, which is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodtrendmicroofficescanbofvulnsept08900220.nasl 8615 2018-02-01 08:19:49Z cfischer $ Description: Trend Micro OfficeScan Server cgiRecvFile.exe Buffer...

Against the heuristics, code emulation detection techniques analysis-vulnerability warning-the black bar safety net

Recent researchVirusthe detection technique, although in thisTrojan, andmalwarerampant,detection technologyin addition to considering the efficiency factorshas become not very important. But I still interest want from here. looking for some ideas. Perhaps against the technology itself is not a wh...

Trend Micro OfficeScan Server cgiRecvFile.exe Buffer Overflow Vulnerability.

Trend Micro OfficeScan is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : kernel (RHSA-2008:0885)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Trend Micro OfficeScan 'cgiRecvFile.exe' ComputerName Parameter Buffer Overflow

Trend Micro OfficeScan or Client Server Messaging Security is installed on the remote host. The installed version is affected by a buffer overflow vulnerability. By setting the parameter 'ComputerName' to a very long string in a specially crafted HTTP request, a malicious user within the local...

Zen Cart products_id[] Array SQL Injection

The installed version of Zen Cart does not validate user-supplied input to the 'productsid' parameter array of the 'index.php' script when 'action' is set to 'multipleproductsaddproduct' before using the keys in a database query in the 'incartmixed' function in 'includes/classes/shoppingcart.php'...

Anzio Web Print Object ActiveX Control Remote BOF Vulnerability

The host is running Anzio, which is prone to a heap-based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodanziowebprintobjbofvuln900115.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Anzio Web Print Object ActiveX Control Remote BOF Vulnerability Authors: Sharath S...

Anzio Web Print Object ActiveX Control Remote BOF Vulnerability

Anzio is prone to a heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

dotProject Multiple XSS and SQLi Vulnerabilities

dotProject is prone to multiple cross-site scripting CSS and SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

RHEL 5 : tomcat (RHSA-2008:0648)

Updated tomcat packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP...

AWStats Totals awstatstotals.php multisort() Function sort Parameter Arbitrary PHP Code Execution

The remote web server is running a version of awstatstotals.php which does not properly sanitize its 'sort' argument. An attacker can run arbitrary commands on the remote host within the context of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

TWiki bin/configure 'image' Parameter Traversal Arbitrary File Access/Execution

The version of TWiki running on the remote host allows access to the 'configure' script, and fails to sanitize the 'image' parameter of that script. When the 'action' parameter is set to 'image', an unauthenticated attacker can exploit this issue to execute arbitrary code or to view arbitrary fil...

phpMyAgenda version 3.0 File Inclusion Vulnerability

The remote web server contains a PHP application that is prone to remote and local file inclusions attacks. Description : phpMyAgenda is installed on the remote system. It's an open source event management system written in PHP. The application does not sanitize the 'rootagenda' parameter in some...

phpMyAgenda 3.0 File Inclusion Vulnerability

phpMyAgenda is prone to a file inclusion vulnerability. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS Site Server < 3.0 formslogin.asp url Parameter XSS

The script 'formslogin.asp' fails to sanitize the 'url' parameter. This allows remote attackers to inject arbitrary web scripts or HTML. %NASLMINLEVEL 70300 Changes by Tenable : - Updated to use compat.inc 11/20/2009 - Updated to use 'a' instead of 'an' 3/2/2018 include'deprecatednasllevel.inc';...

dotCMS Multiple Script id Parameter Traversal Local File Inclusion

The remote host is using dotCMS, an open source J2EE / Java web content management system. The version of dotCMS installed on the remote host fails to sanitize input to the 'id' parameter of the 'news/index.dot' and 'gettingstarted/macros/macrosdetail.dot' scripts before using it to access files...

Pligg settemplate.php template Parameter Local File Inclusion

The remote host is running Pligg, an open source content management system. The installed version of Pligg fails to sanitize the 'template' cookie before using it in 'config.php' to include PHP code. An unauthenticated, remote attacker can exploit this issue to view arbitrary files or even execut...

Coppermine Photo Gallery include/functions.inc.php _data Cookie lang Parameter Traversal Local File Inclusion

The version of Coppermine installed on the remote host fails to sanitize input to the 'lang' array element of its data cookie before using it in 'include/init.inc.php' to include PHP code. Provided the application's character set is set to 'utf-8', which it is by default, an unauthenticated, remo...

Fedora 9 : trac-0.10.5-1.fc9 (2008-6833)

Update to 0.10.5 to fix two non-critical security issues: CVE-2008-2951: Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL in the q parameter. CVE-2008-3328: Cross-site...