WebGlimpse query Parameter Command Injection

The version of WebGlimpse installed on the remote host does not sufficiently sanitize user input to the 'query' parameter of the 'webglimpse.cgi' script before using it to construct and then run a command. An unauthenticated, remote attacker can leverage this issue to execute arbitrary code on th...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to inject arbitrary web script or HTML via the 1 cusemail parameter in a custlostpw action; or 2 helpname, 3 helpemail, 4 helpwebsite, or 5 helpexampleurl parameters in an...

2X Client for RDP 10.1.1204 - ClientSystem Class ActiveX Control Download and Execute

2X Client for RDP 10.1.1204 ClientSystem Class ActiveX Control TuxClientSystem.dll InstallClient Download and Execute Vulnerability tested against: Microsoft Windows Vista SP2 Microsoft Windows Server 2003 r2 sp2 Internet Explorer 8 vendor description: "2X Software is a global leader of desktop a...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Search for specified dirs

This Plugin is searching for the specified webdirs. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP 5.2.x Remote Code Execution Vulnerability

Release Date: 17 February 2012 Affected Versions: 5.2.0 - 5.2.17 unsupported version ------------------------------------------------------------------------------------------ Description: If PHP bails out in startup stage before setting PGmodulesactivated to 1, the filterglobals struct is not...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Moderate: Red Hat Security Advisory: httpd security update

Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

PHP 5.3.9 'php_register_variable_ex()' Code Execution (intrusive check)

The remote host is running a version of PHP that is affected by an arbitrary code execution vulnerability. Specifically, the fix for the hash collision denial of service vulnerability CVE-2011-4885 introduces a remote code execution vulnerability in the function 'phpregistervariableex' in the fil...

CVE-2011-3361

Cross-site scripting XSS vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi...

CVE-2011-3361

CVE-2011-3361 is an XSS vulnerability in BackupPC 3.2.0 (and possibly earlier) exploitable via the num parameter in the browse action to index.cgi, implemented in CGI/Browse.pm. The issue allows remote attackers to inject arbitrary web script or HTML, with impact described as partial integrity an...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

[SECURITY] Fedora 16 Update: php-5.3.10-1.fc16

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

D-Link ShareCenter Products - Multiple Remote Code Execution Vulnerabilities

D-Link ShareCenter Products - Multiple Remote Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/51918/info D-Link ShareCenter products are prone to multiple remote code-execution vulnerabilities. Successful exploits will result in the execution of arbitrary code in the...

Fedora Update for smokeping FEDORA-2012-0813

Check for the Version of smokeping OpenVAS Vulnerability Test Fedora Update for smokeping FEDORA-2012-0813 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

[SECURITY] Fedora 15 Update: smokeping-2.4.2-13.fc15

SmokePing is a latency logging and graphing system. It consists of a daemon process which organizes the latency measurements and a CGI which presents the graphs...

[SECURITY] Fedora 16 Update: smokeping-2.4.2-16.fc16

SmokePing is a latency logging and graphing system. It consists of a daemon process which organizes the latency measurements and a CGI which presents the graphs...

HP Managed Printing Administration Detection

HP Managed Printing Administration, a web-based printer administration interface, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57699; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"HP Managed Printing...