7780 matches found
Horde Mnemo Detection
The remote host is running Mnemo, an open source PHP-based note manager from the Horde Project. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18133; scriptversion"1.23"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"Hor...
phpBB <= 2.0.14 Multiple Vulnerabilities
According to its banner, the remote host is running a version of phpBB that suffers from multiple flaws: - A BBCode Input Validation Vulnerability The application fails to properly filter for the BBCode URL in the 'includes/bbcode.php' script. With a specially crafted URL, an attacker could cause...
RHEL 3 : kernel (RHSA-2005:293)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
phpBB Knowledge Base Module kb.php cat Parameter SQL Injection
The installed version of phpBB on the remote host includes the Knowledge Base module, which does not properly sanitize input to the 'cat' parameter of the 'kb.php' script before using it in SQL queries. An attacker can exploit this flaw to modify database queries, potentially even uncovering user...
Serendipity exit.php Multiple Parameter SQL Injection
The version of Serendipity installed on the remote host allows an attacker to pass arbitrary SQL code through the 'urlid' and 'entryid' parameters of the 'exit.php' script. These flaws may lead to the disclosure / modification of data or attacks against the underlying database application...
sphpblog search.php q Parameter XSS
Due to a lack of input validation, the remote version of Simple PHP Blog can be used to perform a cross-site scripting attack by injecting arbitrary script code to the 'q' parameter of the search.php script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; if...
phpBB Photo Album Module <= 2.0.53 Multiple Vulnerabilities
The installed version of phpBB on the remote host includes a photo album module that has multiple vulnerabilities: - A SQL Injection Vulnerability An attacker can pass arbitrary SQL code through the 'mode' parameter of the 'albumsearch.php' script to manipulate database queries. - Various...
Comersus Cart comersus_searchItem.asp curPage Parameter XSS
The version of Comersus Cart installed on the remote host fails to properly sanitize user input to the 'curPage' parameter of the 'comersussearchItem.asp' script. An attacker can exploit this vulnerability to cause arbitrary HTML and script code to be executed in a user's browser within the conte...
Invision Power Board index.php Members Action st Parameter SQL Injection
A version of Invision Power Board installed on the remote host suffers from a SQL injection vulnerability due to its failure to sanitize user input via the 'st' parameter to the 'index.php' script. An attacker can take advantage of this flaw to inject arbitrary SQL statements into Invision Power...
ModernBill <= 4.3.0 Multiple Vulnerabilities
The version of ModernBill installed on the remote host is subject to multiple vulnerabilities : - A Remote File Include Vulnerability The application fails to sanitize the parameter 'DIR' before using it in the script 'news.php'. An attacker can exploit this flaw to browse or execute arbitrary...
PunBB profile.php id Parameter SQL Injection
According to its banner, the version of PunBB installed on the remote host fails to properly sanitize user input to the script 'profile.php' through the 'changeemail' parameter prior to using it in a SQL query. Once authenticated, an attacker can exploit this flaw to manipulate database queries,...
PostNuke < 0.760 RC4 Multiple Script XSS
The version of PostNuke installed on the remote host fails to properly sanitize user input through the 'op' parameter of the 'user.php' script and the 'module' parameter of the 'admin.php' script before using it in dynamically-generated content. An attacker can exploit this flaw to inject arbitra...
CubeCart <= 2.0.6 Multiple SQL Injections
The installed version of CubeCart on the remote host suffers from multiple SQL injection vulnerabilities due to its failure to sanitize user input via the 'PHPSESSID' parameter of the 'index.php' script, the 'product' parameter of the 'tellafriend.php' script, the 'add' parameter of the...
ProductCart Multiple Input Validation Vulnerabilities
The remote host is running a version of the ProductCart shopping cart software that suffers from several input validation vulnerabilities: - SQL Injection Vulnerabilities The 'advSearchh.asp' script fails to sanitize user input to the 'idCategory', and 'resultCnt' parameters, allowing an attacker...
Service Detection (GET request)
It was possible to identify the remote service by its banner or by looking at the error message it sends when it receives an HTTP request. C Tenable, Inc. include"compat.inc"; if description scriptid17975; scriptversion"1.395"; scriptsetattributeattribute:"pluginmodificationdate",...
phpMyAdmin index.php convcharset Parameter XSS
The installed version of phpMyAdmin suffers from a cross-site scripting vulnerability due to its failure to sanitize user input to the 'convcharset' parameter of the 'index.php' script. A remote attacker may use these vulnerabilities to cause arbitrary code to be executed in a user's browser to...
SiteEnable Multiple Input Validation Vulnerabilities
The remote host is running a version of the SiteEnable CMS package that has several vulnerabilities : - SQL Injection Vulnerability Due to a failure to properly sanitize user input to the 'sortby' parameter of the 'content.asp' script, an attacker can execute SQL queries against the underlying...
MaxWebPortal <= 1.33 Multiple Vulnerabilities
The remote host is running a version of MaxWebPortal that is prone to multiple input validation vulnerabilities: - Multiple SQL Injection Vulnerabilities An attacker can inject SQL statements via various scripts to manipulate database queries. - A Cross-Site Scripting Vulnerability An attacker ca...
PhotoPost < 5.1 Multiple Input Validation Vulnerabilities
The version of PhotoPost PHP installed on the remote host is prone to multiple input validation vulnerabilities: o Multiple SQL Injection Vulnerabilities The application fails to properly sanitize user-input via the 'sl' parameter of the 'showmembers.php' script, and the 'photo' parameter of the...
osCommerce file_manager.php filename Parameter Traversal Arbitrary File Access
The remote host is running osCommerce, a widely installed open source shopping e-commerce solution. The remote version of this software is vulnerable to a directory traversal flaw which may be exploited by an attacker to read arbitrary files on the remote server with the privileges of the web...