MaxWebPortal <= 1.33 Multiple Vulnerabilities

The remote host is running a version of MaxWebPortal that is prone to multiple input validation vulnerabilities: - Multiple SQL Injection Vulnerabilities An attacker can inject SQL statements via various scripts to manipulate database queries. - A Cross-Site Scripting Vulnerability An attacker ca...

PhotoPost < 5.1 Multiple Input Validation Vulnerabilities

The version of PhotoPost PHP installed on the remote host is prone to multiple input validation vulnerabilities: o Multiple SQL Injection Vulnerabilities The application fails to properly sanitize user-input via the 'sl' parameter of the 'showmembers.php' script, and the 'photo' parameter of the...

CoolForum Multiple Vulnerabilities (SQLi, XSS)

The remote host is running a version of CoolForum that suffers from multiple input validation vulnerabilities. - Multiple SQL Injection Vulnerabilities Due to a failure to properly sanitize user-input supplied through the 'pseudo' parameter of the 'admin/entete.php' script and the 'ilogin'...

osCommerce file_manager.php filename Parameter Traversal Arbitrary File Access

The remote host is running osCommerce, a widely installed open source shopping e-commerce solution. The remote version of this software is vulnerable to a directory traversal flaw which may be exploited by an attacker to read arbitrary files on the remote server with the privileges of the web...

Phorum search.php location Parameter HTTP Response Splitting

The version of Phorum installed on the remote host does not properly sanitize input used in the Location response header. An attacker can exploit this flaw with a specially crafted request to inject malicious code into HTTP headers, which may allow execution of arbitrary HTML and script code in a...

PunBB profile.php Multiple Parameter XSS

According to its banner, the version of PunBB installed on the remote host fails to properly sanitize user input to the script 'profile.php' through the 'email' and 'Jabber' parameters. An attacker could exploit this flaw to embed malicious script or HTML code in his profile. Then, whenever someo...

SimpGB guestbook.php quote Parameter SQL Injection

The remote host is running SimpGB, a web-based guestbook application written in PHP. The version of SimpGB installed on the remote host fails to sanitize user input to the 'quote' parameter of the 'guestbook.php' script before using it in SQL queries. An unauthenticated, remote attacker can...

UBB.threads editpost.php Number Parameter SQL Injection

According to its banner, the remote host is running a version of UBB.threads that fails to sufficiently sanitize the 'Number' parameter before using it in SQL queries in the 'editpost.php' script. As a result, a remote attacker can pass malicious input to database queries, potentially resulting i...

PhotoPost PHP < 5.0.1 Multiple Remote Vulnerabilities

According to its banner, the version of PhotoPost PHP installed on the remote host has several vulnerabilities: - An Access Validation Vulnerability. The 'adm-photo.php' script fails to verify authentication credentials, which allows an attacker to change the properties of thumbnails of uploaded...

NewsScript newsscript.pl mode Parameter Privilege Escalation

The remote host is running a version of NewsScript.co.uk's NewsScript that allows a remote attacker to bypass authentication simply by setting the 'mode' parameter to 'admin', thereby allowing him to add, delete, or modify news stories and headlines at will. %NASLMINLEVEL 70300 C Tenable Network...

phpMyFAQ Forum Message username Field SQL Injection

The remote host is running a version of phpMyFAQ that fails to sufficiently sanitize the 'username' parameter before using it in SQL queries. As a result, a remote attacker can pass malicious input to database queries, potentially resulting in data exposure, data modification, or attacks against...

phpBB <= 2.0.13 Multiple Vulnerabilities

According to its banner, the remote host is running a version of phpBB that suffers from multiple flaws: - A Path Disclosure Vulnerability A remote attacker can cause phpBB to reveal its installation path via a direct request to the script 'db/oracle.php'. - A Cross-Site Scripting Vulnerability T...

Stadtaus PHP Form Mail formmail.inc.php Remote File Inclusion

There is a version of Form Mail Script, a PHP script by Ralf Stadtaus, installed on the remote host that suffers from a remote file include vulnerability involving the 'scriptroot' parameter of the 'inc/formmail.inc.php' script. By leveraging this flaw, an attacker may be able to view arbitrary...

TYPO3 'cmw_linklist Extension' 'category_uid' Parameter SQL Injection

The installation of TYPO3 on the remote host is vulnerable to remote SQL injection attacks through the parameter 'categoryuid' used by the third-party cmwlinklist extension. By exploiting this flaw, a remote attacker can uncover sensitive information or even modify existing data. %NASLMINLEVEL...

SquirrelMail S/MIME Plug-in Remote Command Execution

The S/MIME plugin for SquirrelMail installed on the remote host does not sanitize the 'cert' parameter used by the 'viewcert.php' script. An authenticated user can exploit this flaw to execute system commands remotely in the context of the web server. %NASLMINLEVEL 70300 C Tenable Network Securit...

BadBlue ext.dll mfcisapicommand Parameter Remote Overflow

The remote host is running a version of BadBlue HTTP server that has a buffer overflow vulnerability in 'ext.dll', a module that handles HTTP requests. An unauthenticated, remote attacker can leverage this vulnerability by sending an HTTP request containing a 'mfcisapicommand' parameter with more...

phpMyAdmin < 2.6.1 pl1 Multiple Script File Inclusions

The installed version of phpMyAdmin suffers from multiple local file include flaws due to its failure to sanitize user input prior to its use in PHP 'include' and 'requireonce' calls. Specifically, a remote attacker can control values for the 'GLOBALScfgThemePath' parameter used in...

vBulletin misc.php template Parameter PHP Code Injection

The remote version of vBulletin fails to sanitize input to the 'template' parameter of the 'misc.php' script. Provided the 'Add Template Name in HTML Comments' setting in vBulletin is enabled, an unauthenticated attacker may use this flaw to execute arbitrary PHP commands on the remote host...

PBLang BBS <= 4.65 Multiple Vulnerabilities

According to its banner, the remote host is running a version of PBLang BBS, a bulletin board system written in PHP, that suffers from the following vulnerabilities: - HTML Injection Vulnerability in pmpshow.php. An attacker can inject arbitrary HTML and script into the body of PMs sent to users...

paNews admin_setup.php Multiple Parameter Arbitrary PHP Code Injection

The remote host is running a version of paNews that fails to properly sanitize input passed to the script 'includes/adminsetup.php' and, in addition, allows writes by the web user to the directory 'includes' not the default configuration. Taken together, these flaws allow a remote attacker to run...