SMTP settings

Various settings for SMTP parameters used during SMTP/Mail Server scanning. SPDX-FileCopyrightText: 2008 Michel Arboi and Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FTP server does not accept any command

The remote FTP service is not working properly. SPDX-FileCopyrightText: 2008 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FTP server accepts a bad sequence of commands

The remote FTP service accepts commands in any order. SPDX-FileCopyrightText: 2008 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ELOG < 2.6.2-7 DoS Vulnerability

ELOG is prone to a denial of service DoS vulnerability by requesting SPDX-FileCopyrightText: 2008 Justin Seitz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVSTrac < 2.0.1 DoS Vulnerability

CVSTrac is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cvstrac:cvstrac";...

CVE-2008-4727

Cross-site scripting XSS vulnerability in the contact update page ss/bwgkoemr.PUpdateEmrgContacts in SunGard Banner Student 7.3 allows remote attackers to inject arbitrary web script or HTML via the addr1 parameter. NOTE: this might be resultant from a CSRF vulnerability, but there are insufficie...

CVE-2008-4727

CVE-2008-4727 describes a Cross-site Scripting (XSS) vulnerability in SunGard Banner Student 7.3, specifically on the contact update page (ss/bwgkoemr.P_UpdateEmrgContacts) where the addr1 parameter can inject arbitrary script/HTML. The note indicates this may be related to CSRF, but the sources ...

PHP Detection (HTTP)

HTTP based detection of PHP. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.800109";...

abe-sql.txt

|| | | Adult Banner Exchange Website targetid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : IQ-SecuritY www.IQ-tY.com | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Apple iTunes < 8.0 Integer Buffer Overflow (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 8.0. It is, therefore, affected by an integer buffer overflow vulnerability in an included third party driver. A local user can exploit this to gain system privileges. C Tenable Network Security, Inc. include"compat.inc"; if...

FileMaker Service Detection (TCP)

TCP based detection of the FileMaker database server. SPDX-FileCopyrightText: 2008 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

ike-scan (NASL wrapper)

This VT is deprecated. SPDX-FileCopyrightText: 2008 Tim Brown and Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Python <= 2.5.2 Multiple Vulnerabilities - Windows

Python is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescription...

Sql injection

SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3749

CVE-2008-3749 describes an SQL injection vulnerability in tr.php of the YourFreeWorld Banner Management Script. The flaw allows remote attackers to execute arbitrary SQL commands by supplying manipulated input in the id parameter, leading to potential partial to complete data exposure or modifica...

CVE-2008-3749

SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Banner Management Script (tr.php id) Remote SQL Injection Vulnerability

No description provided by source. || | | Banner Management Script tr.php id Remote SQL Injection Vulnerability | | |---------------------S.W.A.T.----------------------| | | Author: S.W.A.T. | | Home : www.svvat.ir | | email: svvateamatYahooDoTcom | | | | | | | script :...

bms-sql.txt

|| | | Banner Management Script tr.php id Remote SQL Injection Vulnerability | | |---------------------S.W.A.T.----------------------| | | Author: S.W.A.T. | | Home : www.svvat.ir | | email: svvateamatYahooDoTcom | | | | | | | script : http://www.yourfreeworld.com/script/bannermanagementscript.ph...

Generic Backdoor Detection (banner check)

The remote service tries to mimic a known service. This is probably a backdoor. In this case, your system may be compromised, and an attacker can control it remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid33951; scriptversion "$Revision: 1.10 $";...

Banner Management Script - id SQL Injection

Banner Management Script - id SQL Injection || | | Banner Management Script tr.php id Remote SQL Injection Vulnerability | | |---------------------S.W.A.T.----------------------| | | Author: S.W.A.T. | | Home : www.svvat.ir | | email: svvateamatYahooDoTcom | | | | | | | script :...