Fool's Workshop Owl's Workshop 1.0 - 'glossary.php' Arbitrary File Access

source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these issues, an attacker may be able t...

ACLogic CesarFTP 0.99 - Remote Resource Exhaustion (Denial of Service)

ACLogic CesarFTP 0.99 - Remote Resource Exhaustion Denial of Service source: https://www.securityfocus.com/bid/9666/info It has been reported that CesarFTP is prone to a remote resource exhaustion vulnerability. This issue is due to the application failing to properly validate user input...

CVE-2004-0086

Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085...

CVE-2004-0085

Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown impact, a different vulnerability than CVE-2004-0086...

Leif M. Wright Web Blog 1.1 - File Disclosure

Leif M. Wright Web Blog 1.1 - File Disclosure source: https://www.securityfocus.com/bid/9517/info Web Blog is prone to a file disclosure vulnerability. Remote attackers may gain access to files on the system hosting the server that reside outside of the server root by submitting a malicious reque...

Hummingbird CyberDOCS contains multiple cross-site scripting vulnerabilities

Overview Hummingbird CyberDOCS contains cross site scripting vulnerabilities that could allow an attacker to obtain sensitive information and possibly impersonate legitimate users. Description Hummingbird CyberDOCS Hummingbird DM is a web-based enterprise document management solution that runs on...

Carello E-Commerce Carello.dll Command Execution

The remote host appears to be running Carello.dll, a web-based shopping cart. Versions up to 1.3 of this web shopping cart have a command execution vulnerability. This could allow a remote attacker to run arbitrary commands on the system with the privileges of the web server. Note that no attack...

phpBB viewtopic.php topic_id Parameter SQL Injection

There is a flaw in the version of phpBB hosted on the remote web server that may allow anyone to inject arbitrary SQL commands, which could in turn be used to gain administrative access on the remote host or to obtain the MD5 hash of the password of any user. %NASLMINLEVEL 70300 C Tenable Network...

CGIScript.net csNews.cgi Advanced Settings Multiple Parameter Arbitrary File Retrieval

The CSNews.cgi exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker can submit a specially crafted web form, which can display the 'setup.cgi' file that contains the superuser name and password. %NASLMINLEVEL 70300 This script was written by John...

Behold! Software counter.exe Malformed HTTP Request Counter Log DoS

The CGI 'counter.exe' exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker may make use of this file to gain access to confidential data or escalate their privileges on the web server. %NASLMINLEVEL 70300 This script was written by John...

CafeLog B2 Multiple Script Remote File Inclusion

The remote web server is running CafeLog, a blogging application written in PHP. The 'blogger-2-b2.php' and 'gm-2-b2.php' scripts are affected by a flaw that could allow an attacker to inject code. An attacker could exploit this to execute arbitrary code on the remote host subject to the privileg...

EJ3 TOPo 2.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/13700/info TOPo is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Poster version.two index.php Account Manipulation Privilege Escalation

The remote host is running 'poster version.two' a news posting system written in PHP. There is a flaw in this version that allows new users to enter a specially crafted name that could allow them to gain administrative privileges on this installation. %NASLMINLEVEL 70300 C Tenable Network Securit...

miniPortail admin.php Cookie Manipulation Security Bypass

The remote host is running MiniPortal, a PHP application for managing a web portal. It is possible to bypass admin authentication by setting a cookie with a value of 'adminok' on admin.php. A remote attacker could exploit this to gain administrative privileges on this host. %NASLMINLEVEL 70300 C...

RealPlayer PNG Deflate Algorithm Heap Corruption Arbitrary Code Execution

According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise for Windows has a flaw in the remote version that may allow an attacker to execute arbitrary code on the remote host, with the privileges of the user running RealPlayer. To do so, an attack...

CVE-2003-1095

BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate...

WebChat defines.php WEBCHATPATH Parameter Remote File Inclusion

The version of Webchat installed on the remote host allows an attacker to read local files or execute PHP code, possibly taken from third- party sites, subject to the permissions of the web server user id. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From: "Frog Man" To:...

GoAhead Web Server 2.1.x - .ASP File Source Code Disclosure

GoAhead Web Server 2.1.x - .ASP File Source Code Disclosure source: https://www.securityfocus.com/bid/9239/info A vulnerability in GoAhead webserver may result in the disclosure of the source code of ASP script files. The vulnerability occurs because the application fails to sanitize HTTP request...

Trillian .74 and below, ident flaw.

Discovered: ----------- 03 September 2002 By Me, Lance Fitz-Herbert aka phrizer. Vulnerable Applications: ------------------------ Tested On Trillian .74 and .73, But im guessing older versions are also vulnerable. Impact: ------- Low-High. This could allow arbitary code to be executed on the...

FreeBSD-SA-02:39.libkvm

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:39.libkvm Security Advisory The FreeBSD Project Topic: Applications using libkvm may leak sensitive descriptors Category: core Module: libkvm Announced: 2002-09-16...