CVE-2005-3803

Cisco IP Phone 7920 (VoIP) 1.0(8) is affected by hard-coded public and private SNMP community strings that cannot be changed, enabling potential remote information disclosure. The issue is documented across NVD/Nessus and Cisco advisories, with a vendor alert suggesting that fixed SNMP communitie...

snmpwalk 'scanner'

This plugin runs snmpwalk against the remote machine to find open ports. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

An SNMP Agent is running

This script detects if SNMP is open and if it is possible to connect with the given credentials / community string from one of the following resources: - SNMPv1/2 community string provided via the target configuration or via SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be...

Multiple Vulnerability In-Portal.net

Multiple Vulnerability In-Portal.net In-Portal Site Package - Price:$295 Quote: "our most popular products designed to run a successful portal or a community web site. It is equipped with the latest In-portal Platform, In-link Directory Management, In-newz News Management and In-bulletin Discussi...

CVE-2005-2880

Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the 1 login field in login.php or 2 LocationID parameter to week.php...

postnuke0750.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke SQL Injection 0.750=x cXIb8O3.5 Author: cXIb8O3 Date: 2.3.2005 from SecurityReason.Com - --- 0.Description --- PostNuke: The Phoenix Release 0.750 PostNuke is an open source, open developement content management system CMS. PostNuke started a...

wordpress15sql.txt

--------------------------------------------------- | BuHa Security-Advisory 1 | May 17th, 2005 | --------------------------------------------------- | Vendor | Wordpress | | URL | http://wordpress.org/ | | Version | getvar"SELECT pingstatus FROM $wpdb-posts WHERE ID = $tbid"; Example: I converte...

Ethereal 10.x - AFP Protocol Dissector Remote Format String

Ethereal 10.x - AFP Protocol Dissector Remote Format String / etherealv0.10.: AFP remote format string exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xethereal-afp-fmt.c -o xethereal-afp-fmt ethereal homepage/url: http://www.ethereal.com syntax: ./xethereal-afp-fmt -spSrPanc...

Community Link Pro login.cgi file Parameter Arbitrary Command Execution

The remote host is running Community Link Pro, a web-based application written in Perl. The remote version of this software fails to sanitize user input to the 'file' parameter of the 'login.cgi' script of shell metacharacters before using it to run a command. An unauthenticated attacker can...

CVE-2005-2084

Cross-site scripting XSS vulnerability in SearchResults.aspx in Community Forum allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-2111

The OpenVAS/Nessus entries confirm CVE-2005-2111 affects Community Link Pro Web Editor’s login.cgi. The flaw lies in the login.cgi script where the file parameter is not sanitized, enabling an unauthenticated attacker to execute arbitrary commands on the remote host. This is described as remote c...

CVE-2005-2111

login.cgi in Community Link Pro Web Editor allows remote attackers to execute arbitrary commands via the file parameter...

prowebExec.txt

BADROOT SECURITY GROUP Security Advisory 2005-0x05 http://www.badroot.org irc.us.azzurra.org badroot - - - - - - - - - - - - - - - - - - - - - - - - - Authors ....... spher3 spher3 at fatalimpulse dot net mozako admin at fatalimpulse dot net Date...

CVE-2005-2084

Cross-site scripting XSS vulnerability in SearchResults.aspx in Community Forum allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-2084

CVE-2005-2084 describes a cross-site scripting (XSS) vulnerability in SearchResults.aspx within a Community Forum, where an attacker can inject arbitrary web script or HTML through the q parameter. The affected software/component is the Community Forum’s SearchResults.aspx page; the vulnerability...

[badroot security] Community link pro web editor: Remote command Execution

BADROOT SECURITY GROUP Security Advisory 2005-0x05 http://www.badroot.org irc.us.azzurra.org badroot - - - - - - - - - - - - - - - - - - - - - - - - - Authors ....... spher3 spher3 at fatalimpulse dot net mozako admin at fatalimpulse dot net Date...

communityXSS.txt

there is aproplem in Community forum community forum make by asp i found a xss in search when we typed http://www.victim.com/forum/search/SearchResults.aspx?q=alert'CSS%20Vulnerable'alert'CSS%20Vulnerable'b%20a=a%20&f=&u= it will make a xss credit [email protected] all ARAB EGYPT...

CVE-2002-1808

CVE-2002-1808 describes a cross-site scripting (XSS) flaw in Meunity Community System 1.1 . The vulnerability allows remote attackers to inject arbitrary web script or HTML by placing Javascript in an IMG tag during topic creation. The root cause, as stated, is insufficient input sanitization of ...

CVE-2002-1808

Cross-site scripting XSS vulnerability in Meunity Community System 1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when creating a topic...

Community Server Forums - SearchResults.aspx Cross-Site Scripting

Community Server Forums - SearchResults.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/14078/info Community Server Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker...