ablespace 1.0 - Cross-Site Scripting / Blind SQL Injection

riginal advisory: http://dsecrg.com/pages/vul/show.php?id=137 Digital Security Research Group DSecRG Advisory DSECRG-09-037 Application: AbleSpace Versions Affected: 1.0 Vendor URL: http://abk-soft.com/ Bugs: Multiple Blind SQL Injections, Multiple XSS Exploits: YES Reported: 18.03.2009 Vendor...

Google Appliance ProxyStyleSheet Command Execution

This module exploits a feature in the Saxon XSLT parser used by the Google Search Appliance. This feature allows for arbitrary java methods to be called. Google released a patch and advisory to their client base in August of 2005 GA-2005-08-m. The target appliance must be able to connect back to...

Mandriva Update for libcdaudio MDVSA-2008:233 (libcdaudio)

Check for the Version of libcdaudio OpenVAS Vulnerability Test Mandriva Update for libcdaudio MDVSA-2008:233 libcdaudio Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

JVN#33846134 Ichitaro series buffer overflow vulnerability

The "Ichitaro" series word processing software, from JustSystems Corporation, contains an issue in the reading of Rich Text Files resulting in a buffer overflow vulnerability. When a user opens a specially crafted file locally or through a website, arbitrary code may be executed with privleges of...

CVE-2005-4880

The CVE-2005-4880 entry concerns Jax Guestbook 3.1 and 3.31, which stores sensitive information under the web root without proper access control. The vulnerability enables remote attackers to obtain user IP addresses by directly requesting (1) guestbook, (2) guestbook_ips2block, (3) ips2block, or...

CVE-2005-4879

The CVE-2005-4879 entry describes XSS vulnerabilities in the PHP script jax_guestbook.php of Jax Guestbook, affecting versions 3.1, 3.31, and 3.50. The weaknesses arise from unsanitized user input in parameters such as gmt_ofs and language (and page per related CVEs), allowing remote attackers to...

Ubuntu: Security Advisory (USN-560-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QIP Version Detection

This script detects the QIP version and saves the result in KB. OpenVAS Vulnerability Test $Id: gbqipdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ QIP Version Detection Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

QIP Version Detection

This script detects the QIP version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.800540";...

Sql injection

SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2004-2036 or CVE-2005-3509...

CVE-2009-0769

QIP 2005 build 8082 allows remote attackers to cause a denial of service CPU consumption and application hang via a crafted Rich Text Format RTF ICQ message, as demonstrated by an \rtf\pict&& message. NOTE: the vulnerability may be in Sergey Tkachenko TRichView. If so, then this should not be...

Design/Logic Flaw

QIP 2005 build 8082 allows remote attackers to cause a denial of service CPU consumption and application hang via a crafted Rich Text Format RTF ICQ message, as demonstrated by an \rtf\pict&& message. NOTE: the vulnerability may be in Sergey Tkachenko TRichView. If so, then this should not be...

CVE-2009-0769

CVE-2009-0769 affects QIP 2005 build 8082 and is a DoS via a crafted RTF ICQ message, causing CPU consumption and application hang. The description notes a possible involvement of Sergey Tkachenko TRichView, and states it may not be a vulnerability in QIP if TRichView is the real component. The c...

CVE-2009-0769

QIP 2005 build 8082 allows remote attackers to cause a denial of service CPU consumption and application hang via a crafted Rich Text Format RTF ICQ message, as demonstrated by an \rtf\pict&& message. NOTE: the vulnerability may be in Sergey Tkachenko TRichView. If so, then this should not be...

Fedora Update for liferea FEDORA-2007-3701

Check for the Version of liferea OpenVAS Vulnerability Test Fedora Update for liferea FEDORA-2007-3701 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for blam FEDORA-2007-3792

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for blam FEDORA-2007-3798

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for liferea FEDORA-2007-3701

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for blam FEDORA-2007-3962

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for GraphicsMagick FEDORA-2007-1340

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...