Link Up Gold vuln.

Link Up Gold vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/link-up-gold-vuln.html vendor:http://www.phpwebscripts.com/linkupgold/ affected version:2.5 and prior Product Description: An unique script for running your own linksite/search...

WhatsUp Gold Default Admin Account

This WhatsUp Gold server still has the default password for the admin user account. An attacker can use this account to probe other systems on the network and obtain sensitive information about the monitored systems. OpenVAS Vulnerability Test $Id: DDIWhatsUpDefault.nasl 8023 2017-12-07 08:36:26Z...

Whatsup Gold vulnerable CGI

The 'maincfgret' cgi is installed. Some versions were vulnerable to a buffer overflow. This might be a false positive, no attack was performed and the version was not checked http://www.idefense.com/application/poi/display?id=142&type=vulnerabilities...

Whatsup Gold vulnerable CGI

The SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15564";...

Vulnerability in Microsoft ISA Server 2000 H.323 Filter (816458)

A security vulnerability exists in the H.323 filter for Microsoft Internet Security and Acceleration Server 2000 that could allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. SPDX-FileCopyrightText: 2004 Jeff Adams...

WhatsUp Gold Default Admin Account (HTTP)

This WhatsUp Gold server still has the default password for the admin user account. An attacker can use this account to probe other systems on the network and obtain sensitive information about the monitored systems. SPDX-FileCopyrightText: 2001 HD Moore / Digital Defense Inc. Some text...

Ipswitch WhatsUp Gold <= 8.04 Multiple Vulnerabilities

The remote host is running WhatsUp Gold, an applications and network monitor and management system for Windows from Ipswitch. The installed version of WhatsUp Gold returns a script's source code in response to a URI with an uppercase file extension. This may lead to the disclosure of sensitive...

[Full-disclosure] 3 minor vulnerabilities in IPSwitch products

The following 3 minor vulnerabilities were found in the products Whatsup Gold 8.04 and WhatsUp Small Business 2004 Ipswitch Whatsup Gold 8.04 - Access to view source code of all filesCIRT-34-advisory Ipswitch Whatsup Gold 8.04 - Cross Site Scripting CIRT-35-advisory Ipswitch Whatsup small Busines...

aMember Pro 2.3.X - Remote File Include Vulnerability

aMember Pro 2.3.X - Remote File Include Vulnerability NewAngels Advisory 2 aMember Pro 2.3.X - Remote File Include Vulnerability ============================================================================= Software: aMember Pro 2.3.4 Type: Remote PHP File Include Vulnerability Risk: High Date:...

[NewAngels Advisory] aMember Pro 2.3.X - Remote File Include Vulnerability

NewAngels Advisory 2 aMember Pro 2.3.X - Remote File Include Vulnerability ======================================================================== ===== Software: aMember Pro 2.3.4 Type: Remote PHP File Include Vulnerability Risk: High Date: Aug. 16 2005 Vendor: CGI Central Credit: =======...

CVE-2004-2403

Cross-site request forgery CSRF vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters...

CVE-2004-2403

CVE-2004-2403 describes a CSRF vulnerability in YaBB 1 GOLD SP 1.3.2. An attacker can cause the administrative user to perform unauthorized actions by enticing the admin to click a crafted link or view an IMG tag that targets YaBB.pl with specific action, id, and moda parameters. The vulnerabilit...

CVE-2004-2402

Cross-site scripting XSS vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded to parameter. NOTE: some sources say that the board parameter is affected, but this is incorrect...

xcartGold.txt

SVadvisory7 Title: Multiple vulnerabilities in x-cart Gold The program: x-cart Gold The vulnerable version: 4.0.8 Homepage: www.x-cart.com Vulnerability is found: 29.05.05 Has found: CENSORED / SVT / www.svt.nukleon.us ===================================================================== The...

CVE-2004-2140

CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the subject variable...

CVE-2004-2139

CVE-2004-2139 affects YaBB 1 Gold prior to 1.3.2. The vulnerability is described as an arbitrary code execution via the settings.pl path in Adminedit.pl, indicating a remote attacker could leverage this in the YaBB 1 Gold web forum software. Affected component/file: YaBB 1 Gold

CVE-2004-2140

CVE-2004-2140 describes a CRLF injection in YaBB 1 Gold before 1.3.2, where an attacker can modify text file contents via the subject parameter. Affected product: YaBB 1 Gold web forum software (pre-1.3.2). Root cause: input handling allows CRLF injection in the subject field, enabling unauthoriz...

CVE-2005-2005

CVE-2005-2005 affects Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier. The vulnerability arises because UPB stores the users.dat file under the web document root with insufficient access control, allowing remote attackers to directly request db/users.dat and obtain sensitive user information. Rel...

Многочисленные уязвимости в x-cart Gold

SVadvisory7 Title: Многочисленные уязвимости в x-cart Gold Программа: x-cart Gold Уязвимая версия: 4.0.8 Homepage: www.x-cart.com Найдена уязвимость: 29.05.05 Нашел: CENSORED / SVT / www.svt.nukleon.us ===================================================================== Описание. ^^^^^^^^^ SQL -...

Multiple vulnerabilities in x-cart Gold

SVadvisory7 Title: Multiple vulnerabilities in x-cart Gold The program: x-cart Gold The vulnerable version: 4.0.8 Homepage: www.x-cart.com Vulnerability is found: 29.05.05 Has found: CENSORED / SVT / www.svt.nukleon.us ===================================================================== The...