IBM INotes and Domino Cross-site Scripting Vulnerability (Jun 2016)

IBM Domino is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:lotusdomino";...

Anwsion(v1. 1-Beta4) injection vulnerability-vulnerability warning-the black bar safety net

apphomemain.php8 5: public function exploreaction // Omitted........... By. Rices - Forum: T00ls.Net - Blog: Rices. so if $GET'category' if isnumeric$GET'category' //It is said before there can also be the injection so is isnum.. $categoryinfo = $this-model'system'-getcategoryinfo$GET'category'; ...

[20120203] - Core - Information Disclosure

Inadequate validation leads to path disclosure in administrator...

[20120201] - Core - Information Disclosure

Inadequate validation leads to information disclosure in administrator...

Mini-Stream Multiple Products Buffer Overflow Vulnerability

This host has Mini-Stream products installed and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodministreammultprdtsbofapr09.nasl 5364 2017-02-20 13:26:07Z cfi $ Mini-Stream Multiple Products Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright ...

Maian Greetings 2.1 - Insecure Cookie Handling

Author: Saime Date: July 12, 2008 Script: Maian Greetings v2.1 Insecure Cookie Handling Vulnerability URL: http://www.maianscriptworld.co.uk Dork: Powered by: Maian Greetings v2.1 Description: Maian Greetings v2.1 is suffering from insecure cookie handling, the /admin/index.php only checks if...

Debian Security Advisory DSA 1533-1 (exiftags)

The remote host is missing an update to exiftags announced via advisory DSA 1533-1. OpenVAS Vulnerability Test $Id: deb15331.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1533-1 exiftags Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Cerberus Helpdesk 2.649 - addresses_export.php?queues SQL Injection

Cerberus Helpdesk 2.649 - addressesexport.php?queues SQL Injection source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that...

Unauthorized reading files on phpSysInfo

/----------------------------------------------------------------------------- | 7 A 6 9 - A d v C: 007 |-----------------------------------------------------------------------------| | | Unauthorized reading files on phpSysInfo |...

VBZoom 1.0 - Arbitrary File Upload

source: https://www.securityfocus.com/bid/5926/info It has been reported that VBZoom 1.01 may allow attackers to upload arbitrary files to a vulnerable system. The vulnerability is the result of VBZoom failing to properly validate the types of files that are received. Validation is done through t...

SIX-webboard does not adequately validate user input thereby permitting directory traversal

Overview SIX-webboard does not adequately validate user input, allowing directory traversal. Description SIX-webboard 2.01 does not adequately validate the "content" CGI variable, allowing directory traversal out of SIX-webboard's content root directory. Attackers may exploit this vulnerability t...