PunBB search.php old_searches Parameter SQL Injection

The version of PunBB installed on the remote host fails to sanitize user-supplied input to the 'oldsearches' parameter of the 'search.php' script before using it in database queries. Provided PHP's 'registerglobals' setting is enabled, an attacker may be able to exploit this issue to delete...

phpWebSite index.php Search Module SQL Injection

The remote host is running a version of phpWebSite that fails to sanitize user-supplied input to the 'module' parameter of the 'search' module before using it in database queries. An attacker may be able to exploit this issue to obtain sensitive information such as user names and password hashes ...

phpMyAdmin grab_globals.lib.php subform Parameter Traversal Local File Inclusion

The version of phpMyAdmin installed on the remote host allows attackers to read and possibly execute code from arbitrary files on the local host because of its failure to sanitize the parameter 'subform' before using it in the 'libraries/grabglobals.lib.php' script. %NASLMINLEVEL 70300 C Tenable...

PunBB < 1.2.8 Multiple Vulnerabilities

According to its banner, the version of PunBB installed on the remote host suffers from several flaws. - A File Include Vulnerability The application fails to validate the 'language' parameter when a user updates his profile and uses that throughout the application to require PHP code in order to...

Open WebMail sessionid Parameter XSS

The installed version of Open WebMail on the remote host is prone to cross-site scripting attacks because it fails to sanitize user- supplied input to the 'sessionid' parameter of the 'openwebmail-main.pl' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

MyBB ratethread.php 'rating' Parameter SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'rating' parameter of the ratethread.php script. A remote attacker can exploit this issue to manipulate SQL queries, resulting in the disclosure...

MyBB misc.php Multiple SQL Injection Vulnerabilities

The version of MyBB installed on the remote host is affected by multiple SQL injection vulnerabilities due to improper sanitization of user-supplied input to the 'fid' parameter of the 'misc.php' script and the 'Content-Disposition' field in the HTTP header to the newreply.php script. A remote...

PunBB < 1.2.7 Multiple Vulnerabilities

The version of PunBB installed on the remote host suffers from several flaws. - Multiple SQL Injection Vulnerabilities The application fails to adequately sanitize user- supplied input to the 'searchid' parameter of the 'search' script as well as an unspecified parameter in one of the admin scrip...

TWiki 'rev' Parameter Arbitrary Command Execution

The version of TWiki running on the remote host allows an attacker to manipulate input to the 'rev' parameter in order to execute arbitrary shell commands on the remote host subject to the privileges of the web server user id. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Ipswitch WhatsUp Gold <= 8.04 Multiple Vulnerabilities

The remote host is running WhatsUp Gold, an applications and network monitor and management system for Windows from Ipswitch. The installed version of WhatsUp Gold returns a script's source code in response to a URI with an uppercase file extension. This may lead to the disclosure of sensitive...

AMember Multiple Script config[root_dir] Parameter Remote File Inclusion

The remote host appears to be running AMember, a commercial membership and subscription management script written in PHP. The version of AMember installed on the remote host fails to properly sanitize user-supplied input to the 'configrootdir' parameter before using it in several scripts to inclu...

CMS Made Simple admin/lang.php nls Parameter Remote File Inclusion

The remote host appears to be running CMS Made Simple, a content management system written in PHP. The version of CMS Made Simple installed on the remote host fails to properly sanitize user-supplied input to the 'nls' parameter of the 'admin/lang.php' script before using it to include PHP code. ...

phpLDAPadmin custom_welcome_page Parameter File Include Vulnerability

The remote host appears to be running phpLDAPadmin, a PHP-based LDAP browser. The version of phpLDAPadmin installed on the remote host fails to properly sanitize user-supplied input to the 'customwelcomepage' parameter of the 'welcome.php' script before using it to include PHP code. By leveraging...

PostNuke <= 0.760 RC4b Multiple Vulnerabilities

The remote host appears to be running PostNuke version 0.760 RC4b or older. These versions suffer from several vulnerabilities : - Multiple Cross-Site Scripting Vulnerabilities An attacker can inject arbitrary HTML and script code into the browser of users by manipulating input to the 'moderate'...

Woltlab Burning Board modcp.php Multiple Parameter SQL Injection

The remote version of Burning Board / Burning Board Lite is prone to SQL injection attacks due to its failure to sanitize user-supplied input to the 'x' and 'y' parameters of the 'modcp.php' script before using it in database queries. Provided an attacker has moderator privileges, these flaws may...

MyBB <= 1.00 RC4 Multiple SQL Injection Vulnerabilities

The version of MyBB installed on the remote host is affected by multiple SQL injection vulnerabilities : - Multiple SQL injection vulnerabilities exist due to improper sanitization of user-supplied input passed via the 'Username' field, the 'action' parameter, and the 'polloptions' parameter. A...

phpAdsNew / phpPgAds < 2.0.6 Multiple Vulnerabilities

The remote host is running phpAdsNew / phpPgAds, an open source banner ad server. The version of phpAdsNews / phpPgAds installed on the remote host suffers from several flaws : - Remote PHP Code Injection Vulnerability The XML-RPC library bundled with the application allows an attacker to inject...

AutoLinks Pro 'al_initialize.php alpath Parameter Remote File Inclusion

The remote host is running AutoLinks Pro, a commercial link management package. The version of AutoLinks Pro installed on the remote host allows attackers to control the 'alpath' parameter used when including PHP code in the 'alinitialize.php' script. By leveraging this flaw, an unauthenticated...

phpMyAdmin < 2.6.4 Multiple XSS

According to its banner, the version of phpMyAdmin installed on the remote host may suffer from two cross-site scripting vulnerabilities due to its failure to sanitize user input to the 'error' parameter of the 'error.php' script and in 'libraries/auth/cookie.auth.lib.php'. A remote attacker may...

phpWebNotes core/api.php t_path_core Parameter File Inclusion

The remote host is running phpWebNotes, an open source page annotation system modeled after php.net. The version of phpWebNotes installed on the remote host allows attackers to control the 'tpathcore' parameter used when including PHP code in the 'core/api.php' script. By leveraging this flaw, an...