2850 matches found
Easy Banner 2009.05.18 - member.php Multiple SQL Injection Authentication Bypass
Easy Banner 2009.05.18 - member.php Multiple SQL Injection Authentication Bypass source: https://www.securityfocus.com/bid/45066/info Easy Banner Free is prone to multiple SQL-injection and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker m...
Easy Banner 2009.05.18 - '/member.php' Multiple SQL Injection / Authentication Bypass
source: https://www.securityfocus.com/bid/45066/info Easy Banner Free is prone to multiple SQL-injection and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage the HTML-injection issues to execute arbitrary script code in the...
Easy Banner 2009.05.18 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/45066/info Easy Banner Free is prone to multiple SQL-injection and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage the HTML-injection issues to execute arbitrary script code in the...
Openswan cisco banner option handling vulnerability
Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long ciscobanner aka serverbanner field...
OS Identification : SIP
The remote operating system can be identified through the banner reported by a SIP service running on it. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50542; scriptversion"1.24"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/06/12";...
Bugzilla Response Splitting and Security Bypass Vulnerabilities
Bugzilla is prone to a response-splitting vulnerability and a security- bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...
ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow
$Id: proftptelnetiac.rb 10900 2010-11-04 18:12:11Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
FreePBX System Recordings Menu Arbitrary File Upload Vulnerability
FreePBX is prone to an arbitrary file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker can leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the webserver. FreePBX...
Collabtive Detection
This host is running Collabtive, a Project Management and Open Source Groupware. OpenVAS Vulnerability Test $Id: gbcollabtivedetect.nasl 5723 2017-03-24 15:46:34Z cfi $ Collabtive Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free software; y...
OrangeHRM Detection
This host is running OrangeHRM, a Human Resource management and development system. OpenVAS Vulnerability Test $Id: gborangehrmdetect.nasl 5735 2017-03-27 12:27:20Z cfi $ OrangeHRM Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free software;...
CVE-2010-3308
Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long ciscobanner aka serverbanner field...
CVE-2010-3753
programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the ciscobanner aka serverbanner field, a different vulnerability than CVE-2010-3308...
Buffer overflow
Buffer overflow in programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long ciscobanner aka serverbanner field...
PT-2010-1066 · Red Hat · Openswan +1
Name of the Vulnerable Software and Affected Versions: Openswan versions 2.6.24 through 2.6.28 Description: The issue is related to a buffer overflow in the client, specifically in programs/pluto/xauth.c, which might allow remote authenticated gateways to execute arbitrary code or cause a denial ...
Haudenschilt Family Connections CMS (FCMS) Version Detection
This script detects the installed version of Haudenschilt Family Connections CMS FCMS. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2009-5003
SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid parameter...
Sql injection
SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid parameter...
CVE-2009-5003
SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid parameter...
CVE-2009-5003
CVE-2009-5003 is an SQL injection in the e-soft24 Banner Exchange Script 1.0. The vulnerability is in click.php, exploitable via the targetid parameter to allow remote execution of arbitrary SQL commands. Multiple sources (NVD, CVE lists, PRION) corroborate this description. The reports do not pr...
