Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Puppet Enterprise Console Detection

Puppet Enterprise Console, a web management interface for Puppet Enterprise, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66234; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Puppet Enterprise Console...

JBoss Web Services Endpoint Enumeration

JBossWS, a framework similar to JAX-WS for making Java EE web services, is listening on the remote host and lists its registered endpoints. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid66189; scriptversion"1.3";...

Mandriva Linux Security Advisory : munin (MDVSA-2013:105)

Updated munin packages fix security vulnerabilities : The qmailscan plugin for Munin before 2.0 rc6 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names CVE-2012-2103. Munin before 2.0.6 stores plugin state files that run as root in the sa...

CVE-2013-0132

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables...

CVE-2013-0132

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables...

CVE-2013-0132: Improper Control of Generation of Code

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables...

[CVE-REQUEST] Multiple CSRF vulnerabilities on Foscam IP cameras web UI

Embedded Web interface version 2.4.10.3 and older of Foscam FI8910W, FI8908W and many others is vulnerable to CSRF attacks. This allows attacker to perform calls to any CGI API using cached basic server authentication data stored in victims browser. Details: For example, the following URL request...

Citrix Access Gateway User Web Interface Detection

The remote web server hosts the web interface for using Citrix Access Gateway, an SSL VPN appliance. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65951; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22";...

mnoGoSearch Detection

The remote web server hosts mnoGoSearch, a CGI-based web search engine application formerly known as UdmSearch. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65901; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

Foscam Cross Site Request Forgery

Embedded Web interface version 2.4.10.3 and older of Foscam FI8910W, FI8908W and many others is vulnerable to CSRF attacks. This allows attacker to perform calls to any CGI API using cached basic server authentication data stored in victims browser. Details: For example, the following URL request...

VulnCheck KEV: CVE-2018-11654

Information disclosure in Netwave IP camera at getstatus.cgi via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information from the device...

Medium: perl

Issue Overview: A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the...

[SECURITY] Fedora 17 Update: perl-5.14.4-224.fc17

Perl is a high-level programming language with roots in C, sed, awk and she ll scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

Gallery Detection

The remote host is running Gallery, an open source photo album application written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65766; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Gallery...

Cerb Detection

The remote web server hosts Cerb, a web-based business collaboration and automation tool. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65983; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Cerb...

McAfee Vulnerability Manager Detect

McAfee Vulnerability Manager, a web-based vulnerability manager, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65737; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22"; scriptxrefname:"IAVT"...

RedHat Update for perl RHSA-2013:0685-01

Check for the Version of perl OpenVAS Vulnerability Test RedHat Update for perl RHSA-2013:0685-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CentOS Update for perl CESA-2013:0685 centos5

Check for the Version of perl OpenVAS Vulnerability Test CentOS Update for perl CESA-2013:0685 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for perl CESA-2013:0685 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected", value:"per...