BizMail bizmail.cgi Arbitrary Mail Relay

The remote web server is hosting the CGI bizmail.cgi, a CGI script for sending the content of web forms to email addresses. The remote version of this software fails to sanitize the 'email' parameter to the 'bizmail.cgi' script of CRLF sequences. An unauthenticated, remote attacker may be able to...

Mambo Open Source Tar.php Remote File Inclusion

The version of Mambo Open Source on the remote host fails to properly sanitize input passed through the 'mosConfigabsolutepath' parameter of the 'Tar.php' script. Provided PHP's 'registerglobals' setting is enabled, a remote attacker may exploit this vulnerability to cause code to be executed in...

paNews comment.php showpost Parameter XSS

According to its banner, the remote host is running a version of paNews that fails to sanitize input to the 'showpost' parameter of the 'comment.php' script before using it to generate dynamic web content. By coercing an unsuspecting user into visiting a malicious website, an attacker may be able...

Open WebMail openwebmail.pl logindomain Parameter XSS

The remote host is running at least one instance of Open WebMail that fails to sufficiently validate user input supplied to the 'logindomain' parameter. This failure enables an attacker to run arbitrary script code in the context of a user's web browser. %NASLMINLEVEL 70300 This script was writte...

vBulletin forumdisplay.php comma Parameter Arbitrary Command Execution

The remote version of vBulletin is vulnerable to a remote command execution flaw through the script 'forumdisplay.php'. A malicious user could exploit this flaw to execute arbitrary commands on the remote host with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security,...

ht://Dig htsearch.cgi config Parameter XSS

The remote host is running a version of ht://Dig which is vulnerable to an unspecified cross-site scripting attack. An attacker can exploit this flaw to steal information from unsuspecting users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Claroline add_course.php Multiple Parameter XSS

The remote version of Claroline fails to sanitize user input to several parameters of the 'addcourse.php' script. Using a specially crafted URL, an attacker may be able to exploit this issue to perform cross-site scripting attacks against users of the affected application. %NASLMINLEVEL 70300 C...

Xoops Incontent Module Traversal Arbitrary PHP File Source Disclosure

The remote host is running Incontent, a third-party module for Xoops. The version of Incontent installed on the remote host fails to sanitize user-supplied input to the 'url' parameter of the 'modules/incontent/index.php' script before using it to read a file whose contents are returned. By passi...

phpPgAds dest Parameter HTTP Response Splitting

There is a flaw in the remote phpPgAds/phpAdsNew, a banner management and tracking system written in PHP. This version of phpPgAds/phpAdsNew is affected by an HTTP response splitting vulnerability. An attacker, exploiting this flaw, would be able to redirect users to another site to perform anoth...

Exponent CMS Multiple Script pathos_core_version Parameter Path Disclosure

The remote host is running Exponent, a web-based content management system implemented in PHP. Directly requesting several different pages reveals the absolute path where Exponent is installed. A remote attacker could use this information to mount further attacks. In addition, the installed versi...

Siteman < 1.1.11 Multiple Vulnerabilities

The remote host is running Siteman, a web-based content management system written in PHP. The version of this software hosted on the remote web server fails to sanitize input to the 'line' parameter of the 'users.php' script when 'do=create', which allows an attacker with valid credentials to...

pLog register.php Multiple Parameter XSS

The remote host is running pLog, a blogging system written in PHP. The remote version of this software does not perform a proper validation of user-supplied input and is, therefore, vulnerable to a cross-site scripting attack. To exploit this flaw, an attacker would need to use the script...

AWStats awstats.pl configdir Parameter Arbitrary Command Execution

The remote host is running AWStats, a free logfile analysis tool for analyzing ftp, mail, web, ... traffic. The remote version of this software fails to sanitize user-supplied input to the 'configdir' parameter of the 'awstats.pl' script. An attacker may exploit this condition to execute commands...

JAWS index.php gadget Parameter Traversal Arbitrary File Access

The remote web server is running JAWS, a content management system written in PHP. Input to the 'gadget' parameter of index.php is not properly sanitized. A remote attacker could exploit this to read potentially sensitive data from the system. This information could also be used to mount further...

ZeroBoard Multiple Scripts dir Parameter Remote File Inclusion

The remote host runs Zeroboard, a web BBS application popular in Korea. The remote version of this CGI is vulnerable to multiple flaws which may allow an attacker to execute arbitrary PHP commands on the remote host by including a PHP file hosted on a third-party server, or to read arbitrary file...

Minis minis.php month Parameter Traversal Arbitrary File Access

The remote host is running Minis, a weblogging system written in PHP. The remote version of this software is vulnerable to a directory traversal attack. Input to the 'month' parameter of the 'minis.php' script is not properly sanitized. A remote attacker could exploit this to read arbitrary files...

Siteman forum.php page Parameter XSS

The remote host is running Siteman, a web-based content management system written in PHP. The remote version of this software is vulnerable to a cross-site scripting attack due to a lack of sanitization of user-supplied data to the 'page' parameter of the 'forum.php' script. Successful exploitati...

MyBB member.php 'uid' Parameter SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the avatar upload system via the 'uid' parameter of the member.php script. If PHP's 'magicquotesgpc' setting is disabled, can exploit this issue to...

e_Board index2.cgi message Parameter Traversal Arbitrary File Access

The remote host is running eBoard, a web-based bulletin board system written in Perl. The version of eBoard running on the remote web server has a directory traversal vulnerability in the 'message' parameter of 'index2.cgi'. A remote attacker could exploit this to read sensitive information from...

Serendipity compat.php searchTerm Parameter XSS

The remote version of Serendipity is vulnerable to cross-site scripting attacks due to a lack of sanity checks on the 'searchTerm' parameter in the 'compat.php' script. With a specially crafted URL, an attacker can cause arbitrary code execution in a user's browser resulting in a loss of integrit...