359 matches found
Fedora Update for freeipa FEDORA-2013-2434
Check for the Version of freeipa OpenVAS Vulnerability Test Fedora Update for freeipa FEDORA-2013-2434 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Zoho ManageEngine Support Center Plus Multiple Vulnerabilities
This host is running Zoho ManageEngine Support Center Plus and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageenginesupportcenterplusmultvuln.nasl 5988 2017-04-20 09:02:29Z teissa $ Zoho ManageEngine Support Center Plus Multiple Vulnerabilities Authors: Antu Sanadi...
ManageEngine Support Center Plus < 7.9.x Multiple Vulnerabilities - Active Check
ManageEngine Support Center Plus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
ManageEngine SupportCenter Plus < 7.9 Build 7905 Multiple Vulnerabilities
The remote host is running a version of ManageEngine SupportCenter Plus less than 7.9 build 7905. Such versions are affected by multiple vulnerabilities: - A SQL injection vulnerability in the 'countSql' parameter of the '/servlet/AJaxServlet' script. - Multiple stored cross-site scripting...
ManageEngine Support Center Plus Multiple Fields XSS Vulnerabilities (Apr 2012) - Active Check
ManageEngine Support Center Plus is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
QuickEStore 7.9 SQL Injection
======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
PHP-Nuke 8.0 - sid SQL Injection
PHP-Nuke 8.0 - sid SQL Injection version Tested on 7.9 & 6.0 '; if $argc table prefix\n"; print "ex.: " . $argv0 . " phpnuke.org 7\n"; credits; exit; / few definitions / if empty$argv3 $prefix = 'nuke'; define tables prefix else $prefix = $argv3; switch $argv2 case "6": $query...
NukeSentinel 2.5.05 - 'nsbypass.php' Blind SQL Injection
!/usr/bin/php URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------ Usage: $argv0 -url -victim Opts Options: -isadmin Is the victim an Admin 1 or a normal user default=0 ? -prefix Table prefix default=nuke -tid If you have already used this sploit -b...
Sql injection
Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via 1 the active parameter in admin/modules/modules.php; the 2 adclass, 3 imageurl, 4 clickurl, 5 adcode, or 6 position parameter in modules/Advertising/admin/index.php;...
CVE-2007-0372
CVE-2007-0372 involves multiple SQL injection flaws in PHP-Nuke 7.9. The vulnerabilities allow remote attackers to execute arbitrary SQL commands through parameters in admin/modules/modules.php (active) and modules/Advertising/admin/index.php (ad_class, imageurl, clickurl, ad_code, position), plu...
CVE-2007-0372
Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via 1 the active parameter in admin/modules/modules.php; the 2 adclass, 3 imageurl, 4 clickurl, 5 adcode, or 6 position parameter in modules/Advertising/admin/index.php;...
CVE-2006-6200
The CVE-2006-6200 entry describes multiple SQL injection vulnerabilities in the News module of PHP-Nuke (version 7.9 and earlier). Specifically, the rate_article and rate_complete functions in modules/News/index.php are affected when magic_quotes_gpc is disabled, allowing remote attackers to exec...
CVE-2006-5720
CVE-2006-5720 describes a remote SQL injection in the PHP-Nuke Journal module (files: modules/journal/search.php) where the parameter forwhat can be tainted to inject arbitrary SQL. Affected software: PHP-Nuke 7.9 and earlier. Root cause: improper input handling in the journal search feature lead...
PHP-Nuke 7.9 Final - phpbb_root_path Remote File Inclusions
PHP-Nuke 7.9 Final - phpbbrootpath Remote File Inclusions Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : PHP NUKE ALL VERSION Credits : ERNE Thanks : DjReMix,Eskobar,TRIP,ßy...
Sql injection
Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the OrderID parameter in a shipping.cfm and b checkout.cfm, 2 ItemID parameter in c proddetail.cfm, 3 SubCatID parameter in d index.cfm, the 4 CategoryID parameter ...
QuickEStore 7.9 vuln.
QuickEStore 7.9 vuln. Vuln. discovered by : r0t Date: 25 april 2006 vendorlink:www.quickestore.com affected versions:7.9 and previous orginal advisory:http://pridels.blogspot.com/2006/04/quickestore-79-vuln.html Vuln. Description: 1. SQL Injection vuln. QuickEStore contains a flaw that allows a...
waraxe-2006-SA-044.txt
================================================================================ waraxe-2006-SA044 ================================================================================ XSS in phpNuke 7.8 and older versions ===============================================================================...
PHP-Nuke 7.x - Content Filtering Bypass
PHP-Nuke 7.x - Content Filtering Bypass source: https://www.securityfocus.com/bid/15855/info PHPNuke is prone to a content filtering bypass vulnerability. This issue can allow an attacker to bypass content filters and potentially carry out cross-site scripting, HTML injection and other attacks...
SecurityAlert SA025 : PHPNuke Remote Directory Traversal
Author: sp3x Date: 19. October 2005 Affected software : =================== PHPNuke version : 7.8 - 7.9 + patch 3.1 Description : ============= PHP-Nuke is a Web Portal System, storytelling software, News system, online community or w hatever you want to call it. The goal of PHP-Nuke is to have a...