Quick Poll Local File Include and Arbitrary File Deletion Vulnerabilities

Quick Poll is prone to a local file-include vulnerability and an arbitrary-file- deletion vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

phpWebSite 1.7.1 - local Cross-Site Scripting

phpWebSite 1.7.1 - local Cross-Site Scripting source: https://www.securityfocus.com/bid/46673/info phpWebSite is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Samba < 3.5.7 'FD_SET' Memory Corruption Vulnerability

Samba is prone to a memory-corruption vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba"; ifdescription...

Oracle Java SE Code Execution Vulnerability - 01 - (Feb 2011) - Windows

Sun Java SE is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MarkNet Alliance CMS SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title:MarkNet Alliance CMS SQL Injection Vulnerability Author: Dr.0rYX and Cr3w-DZ Category: webapps/0day TESTED ON : Windows Vista . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ ...

Logwatch Log File - Special Characters Privilege Escalation

source: https://www.securityfocus.com/bid/46554/info Logwatch is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue execute arbitrary code with superuser privileges. Successful exploits will result in the complete compromise of affected computers. Failed...

WordPress Plugin YT-Audio 1.7 - 'v' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46591/info The YT-Audio plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities - Linux

VLC Media Player is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Escort Directory CMS SQL Injection Vulnerability

Escort Directory CMS SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/46457/info Escort Directory CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL...

Getsimple CMS 2.03 - 'upload-ajax.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/46427/info GetSimple CMS is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary cod...

Smarty Template Engine 2.6.9 - '$smarty.template' PHP Code Injection

source: https://www.securityfocus.com/bid/46366/info Smarty Template Engine is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the webserver process. This may facilitate a compromise of the applicati...

Vaadin Framework 6.0.0 - 6.4.8 XSS Vulnerability

Vaadin Framework is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TCExam 11.1.16 - user_password Cross-Site Scripting

TCExam 11.1.16 - userpassword Cross-Site Scripting source: https://www.securityfocus.com/bid/46096/info TCExam is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Betsy 4.0 - page Local File Inclusion

Betsy 4.0 - page Local File Inclusion source: https://www.securityfocus.com/bid/46124/info Betsy is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to...

Apache CouchDB Web Administration Interface Cross Site Scripting Vulnerability

Apache CouchDB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker ste...

Micro Focus Enterprise Administration Server Authentication Check

The administration interface for the remote Micro Focus Enterprise Server is accessible without authentication. A remote attacker is able to access potentially sensitive information and modify any settings available through this administration interface. %NASLMINLEVEL 70300 C Tenable Network...

WordPress Plugin TagNinja 1.0 - id Cross-Site Scripting

WordPress Plugin TagNinja 1.0 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/46090/info The TagNinja plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Micro Focus Enterprise Administration Server Detection

The remote web server is a Micro Focus Enterprise Administration Server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51838; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Micro Focus Enterprise Administration Server Detection";...

Joomla! Component com_virtuemart 1.1.6 - SQL Injection

Joomla! Component comvirtuemart 1.1.6 - SQL Injection source: https://www.securityfocus.com/bid/46070/info The VirtueMart eCommerce component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Weborf < 0.12.5 DoS Vulnerability

Weborf is prone to a denial of service DoS vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...