CVE-2010-4981

SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4981

The CVE-2010-4981 entry describes a SQL injection in YourFreeWorld Banner Management, via trackads.php, where the id parameter is not properly sanitized, allowing remote attackers to execute arbitrary SQL commands. Affected component/file: trackads.php in YourFreeWorld Banner Management. Impact: ...

Squid Caching Server CNAME DoS Vulnerability

Squid caching server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Sesame Street YouTube Channel Hacked, Porn Posted

Sesame Street YouTube Channel Hacked, Porn Posted On Sunday afternoon, some of the world's worst lowlifes decided to hack the Sesame Street YouTube channel and replace some of the videos with pornographic clips. For about 20 minutes yesterday, visitors to the YouTube channel of the popular...

phpPgAdmin Detection (HTTP)

HTTP based detection of phpPgAdmin. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103294";...

openlookup-info NSE Script

Parses and displays the banner information of an OpenLookup network key-value store server. Example Usage nmap -p 5850 --script openlookup-info Script Output 5850/tcp open openlookup | openlookup-info: | sync port: 5850 | name: Paradise, Arizona | your address: 127.0.0.1:50162 | timestamp:...

IBM WebSphere Application Server Cross-Site Request Forgery Vulnerability

IBM WebSphere Application Server is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user and gain access to the affected application; other attacks are also possible. IBM WebSphere...

Calendar Manager Service rpc.cmsd Service Detection

This script detects the running SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.802163";...

IBM Open Admin Tool Version Detection

This script finds the installed IBM Open Admin Tool version. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL-Ledger SQL Injection Vulnerability

LedgerSMB and SQL-Ledger are prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...

CVE-2011-1624

Cisco IOS 12.258SE, when a login banner is configured, allows remote attackers to cause a denial of service device reload by establishing two SSH2 sessions, aka Bug ID CSCto62631...

Design/Logic Flaw

Cisco IOS 12.258SE, when a login banner is configured, allows remote attackers to cause a denial of service device reload by establishing two SSH2 sessions, aka Bug ID CSCto62631...

CVE-2011-1624

Cisco IOS 12.258SE, when a login banner is configured, allows remote attackers to cause a denial of service device reload by establishing two SSH2 sessions, aka Bug ID CSCto62631...

CVE-2011-1624

CVE-2011-1624 affects Cisco IOS 12.2(58)SE; a vulnerability in login banner processing allows an authenticated, remote attacker to trigger a DoS by initiating two SSH2 sessions, potentially causing a device reload. Root cause: improper handling of login banners. Cisco advisories state a software ...

BlueSoft Banner Exchange SQL Injection

Script Name : BlueSoft Banner Exchange Vulnerable Type : Blind SQL Ýnjection Time Based Author : darkTR Date : 08.08.2011 E-mail : [email protected] Target: : signup.php?refererid=SQLi Demo: : http://www.shopbluesoft.com/demo6/signup.php?refererid=1SQLi darkTR / Code Hunters TIM...

BlueSoft Banner Exchange - 'referer_id' SQL Injection

source: https://www.securityfocus.com/bid/49091/info BlueSoft Banner Exchange is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...

BlueSoft Banner Exchange - referer_id SQL Injection

BlueSoft Banner Exchange - refererid SQL Injection source: https://www.securityfocus.com/bid/49091/info BlueSoft Banner Exchange is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could all...

Univention Corporate Server (UCS) and Management Console Detection

This script attempts to determine if the target is a Univention Corporate Server UCS. It also tries to detect the Univention Management Console. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Click&BaneX v1.01 - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&BaneX v1.01 - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-02 Vulnerability Laboratory ID VL-ID: ==================================== 218 Product & Service Introduction: =============================== Click&BaneX is a full...

Click&BaneX v1.01 - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&BaneX v1.01 - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-02 Vulnerability Laboratory ID VL-ID: ==================================== 218 Product & Service Introduction: =============================== Click&BaneX is a full...