1291 matches found
AWStats Totals awstatstotals.php multisort() Function sort Parameter Arbitrary PHP Code Execution
The remote web server is running a version of awstatstotals.php which does not properly sanitize its 'sort' argument. An attacker can run arbitrary commands on the remote host within the context of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2008-7091
creationtimestamp| type| source ---|---|--- 2008-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6172 2008-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6173...
Mac OS X Multiple Vulnerabilities (Security Update 2008-004)
The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-004 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if descripti...
eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities
www.BugReport.ir AmnPardaz Security Research Team Title: eLineStudio Site Composer ESC =2.6 Multiple Vulnerabilities Vendor: www.elinestudio.com Vulnerable Version: 2.6 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/45 1. Description: eLineStudio...
Fedora 8 : nagios-plugins-1.4.11-2.fc8 (2008-3061)
Upstream released a new version. This also fixes CVE-2007-5198 315101. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
MikroTik RouterOS with Blank Password (telnet check)
The remote host is running MikroTik RouterOS without a password for its 'admin' account. Anyone can connect to it and gain administrative access to it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid30213;...
Fedora 7 : clamav-0.92-6.fc7 (2008-0170)
Upstream clamav 0.92 fixes multiple security issues : - CVE-2007-6335 426210 - CVE-2007-6336 426343 - CVE-2007-6337 426344 Sendmail-specific parts moved to separate milter subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...
Flash Player < 7.0.73.0 / 9.0.115.0 Multiple Vulnerabilities (APSB07-20)
According to its version number, the instance of Flash Player on the remote Windows host is affected by multiple issues, including several which could allow for arbitrary code execution by means of a malicious SWF file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Hosting Controller - Multiple Security Bugs (Extremely Critical)
Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From company - There is temporary solution in this report Exploit:...
AIX 5.2 TL 10 : printers.rte (U814071)
The remote host is missing AIX PTF U814071, which is related to the security of the package printers.rte. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U814071. The text itself is copyright C...
Slackware 12.0 : poppler (SSA:2007-222-02)
A new poppler package is available for Slackware 12.0 to fix an integer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-222-02. The text itself is copyright C Slackware Linux...
MS07-041: Vulnerability in Microsoft Internet Information Services Could Allow Remote Code Execution (939373)
The remote host has a version of IIS that is vulnerable to a remote flaw that could allow an attacker to take the control of the remote web server and execute arbitrary commands on the remote host with the SYSTEM privileges. Tenable Network Security, Inc. include"compat.inc"; if description...
Mac OS X Multiple Vulnerabilities (Security Update 2007-005)
The remote host is running a version of Mac OS X 10.4 or 10.3 that does not have Security Update 2007-005 applied. This update fixes security flaws in the following applications : Alias Manager BIND CoreGraphics crontabs fetchmail file iChat mDNSResponder PPP ruby screen texinfo VPN C Tenable...
seditio110-sql.txt
--Security Report-- Advisory: Seditio http://www.victim.com/users.php?m=profile&a=avatarselect&x=XVALUE&id=default.gifSQL...
Easy Address Book Web Server Query Remote Format String
It appears that the remote web server is affected by a remote format string issue. Using a specially crafted URL containing a format string specifier, an unauthenticated, remote attacker can crash the affected application and possibly execute arbitrary code on the remote host. %NASLMINLEVEL 70300...
[KAPDA]MyBB 1.1.7 ~ admin/global.php ~ XSS Attack
ORIGINAL ADVISORY: http://myimei.com/security/2006-08-17/mybb-117-adminglobalphp-xss-attack.html http://kapda.ir/page-advisory.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.7 Class: Remote Status: Unpatched Exploit: Available Solution: Availab...
spymacXSSflaws.txt
Multiple Cross site scripting in Spymac WOS v Vendor url: http://www.spymac.com/network.php?p=wos Advisore:http://lostmon.blogspot.com/2006/05/ multiple-cross-site-scripting-in.html Vendor notify: yes Exploit available: yes Spymac WOS is powered by an integrated collection of Web and desktop...
Aardvark Topsites CONFIG[path] Parameter Remote File Inclusion
Aardvark Topsites PHP is installed on the remote host. It is an open source toplist management system written in PHP. The application does not sanitize user-supplied input to the 'CONFIGpath' variable in some PHP files, for example, 'lostpw.php' This allows an attacker to include arbitrary files,...
Game-Panel <= 2.1.6 XSS
ORIGIONAL SOURCE: http://notlegal.ws/gamepanel.txt summary software: Game-Panel vendors website: http://game-panel.com versions: = 2.6.1 class: remote status: unpatched exploit: available solution: not available discovered by: sycko risk level: medium description game-panel uses a global variable...
[eVuln] Skate Board Multimple Vulnerabilities
New eVuln Advisory: Skate Board Multimple Vulnerabilities http://evuln.com/vulns/84/summary.html --------------------Summary---------------- eVuln ID: EV0084 CVE: CVE-2006-0809 CVE-2006-0810 CVE-2006-0811 Software: Skate Board Sowtware's Web Site: http://bb.jiraiya.se/main.php?content=start...