Syhunt: A-A-S (Application Access Server) Multiple Security Vulnerabilities

Syhunt: A-A-S Application Access Server Multiple Security Vulnerabilities Advisory-ID: 200905111 Discovery Date: 3.23.2009 Release Date: 5.11.2009 Affected Applications: A-A-S 2.0.48 and possibly older versions Class: XSRF Cross Site Request Forgery Arbitrary Command Execution, Undocumented Defau...

A A S Application Access Server Server Detection

The A A S Application Access Server is running at this port. The A A S Application Access Server makes the PC administration possible over LAN and WANs. OpenVAS Vulnerability Test $Id: aasdetect.nasl 6032 2017-04-26 09:02:50Z teissa $ A A S Application Access Server Detection Authors: Michael Mey...

A-A-S Application Access Server Detection (HTTP)

HTTP based detection of A-A-S Application Access Server. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

A-A-S Application Access Server Multiple Vulnerabilities

According to its version number, the remote version of A-A-S Application Access Server is prone to multiple security issues including a cross-site request-forgery vulnerability, an insecure-default-password vulnerability and an information-disclosure vulnerability. Attackers can exploit these...

Geeklog 1.5.2 - 'usersettings.php' SQL Injection

source: https://www.securityfocus.com/bid/34553/info Geeklog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

Simple Machines Forum < 1.1.8 Password Reset Function Bypass

Binary data 4813.prm...

Dark Age CMS 2.0 - login.php SQL Injection

Dark Age CMS 2.0 - login.php SQL Injection source: https://www.securityfocus.com/bid/33271/info Dark Age CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

All In One 1.4 Control Panel - cp_polls_results.php SQL Injection

All In One 1.4 Control Panel - cppollsresults.php SQL Injection source: https://www.securityfocus.com/bid/31949/info All In One Control Panel AIOCP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Simple PHP Blog config/users.php Arbitrary User Password Hash Disclosure

The version of Simple PHP Blog installed on the remote host allows an unauthenticated, remote attacker to retrieve information about non-admin users defined to the application, including their user names and password hashes, which could in turn be used to gain access to the application. While the...

Simasy CMS - id SQL Injection

Simasy CMS - id SQL Injection source: https://www.securityfocus.com/bid/30774/info Simasy CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

XOOPS vacatures Module - cid SQL Injection

XOOPS vacatures Module - cid SQL Injection source: https://www.securityfocus.com/bid/27889/info XOOPS 'vacatures' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

MyPHP Forum 3.0 - search.php Multiple SQL Injections

MyPHP Forum 3.0 - search.php Multiple SQL Injections source: https://www.securityfocus.com/bid/27118/info MyPHP Forum is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allo...

GLSA-200709-10 : PhpWiki: Authentication bypass

The remote host is affected by the vulnerability described in GLSA-200709-10 PhpWiki: Authentication bypass The PhpWiki development team reported an authentication error within the file lib/WikiUser/LDAP.php when binding to an LDAP server with an empty password. Impact : A remote attacker could...

Intel Core 2 CPUs multiple security vulnerabilities

Multiple vulnerabilities allow application to access protected pages and corrupt data in memory...

Conti FTP Server 1.0 - Large String Denial of Service

Conti FTP Server 1.0 - Large String Denial of Service source: https://www.securityfocus.com/bid/24672/info The Conti FTP Server is prone to a denial-of-service vulnerability. A remote attacker may be able to exploit this issue to deny service to legitimate users of the application. Conti FTP Serv...

fipsShop - Multiple SQL Injections

source: https://www.securityfocus.com/bid/21289/info fipsShop is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Inventory Manager - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/21069/info Inventory Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. Successful exploits of these vulnerabiliti...

CodeAvalanche News 1.2 - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/18031/info CodeAvalanche News is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromis...

X-Changer 0.20 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/17322/info X-Changer is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Papoo 2.1.2 - index.php?menuid SQL Injection

Papoo 2.1.2 - index.php?menuid SQL Injection source: https://www.securityfocus.com/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...