SmarterTools SmarterStats Multiple Vulnerabilities

This host is SmarterTools SmarterStats and is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHPShop CMS Free 3.4 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23058 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinphpshopcmsfree.html Product: PHPShop CMS Free Vendor: PHPShop Software http://www.phpshopcms.ru/ Vulnerable Version: 3.4 and probably prior Tested Version: 3.4 Vendor Notification: 23 November 2011...

Debian DSA-2333-1 : phpldapadmin - several vulnerabilities

Two vulnerabilities have been discovered in phpLDAPadmin, a web-based interface for administering LDAP servers. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-4074 Input appended to the URL in cmd.php when 'cmd' is set to 'debug' is not properly...

MyBB MyStatus Plugin process-mystatus.php 'statid' Parameter SQLi Vulnerability

MyBB with MyStatus Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Traq 2.2 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23046 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesintraq.html Product: Traq Vendor: Jack Polgar http://traqproject.org/ Vulnerable Version: 2.2 and probably prior Tested Version: 2.2 Vendor Notification: 07 September 2011 Vulnerability Type: XSS, SQL...

dotProject 'index.php' SQL Injection Vulnerability

The host is running dotProject and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddotprojectsqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ dotProject 'index.php' SQL Injection Vulnerability. Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

ASAS Server End User Self Service (EUSS) SQL Injection Vulnerability

The host is running Authenex ASAS and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodauthenexasasserversqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ ASAS Server End User Self Service EUSS SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

Pentaho BI Server Multiple Vulnerabilities

Pentaho BI Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP SiteScope Cross-Site Scripting and Session Fixation Vulnerabilities

This host is running HP SiteScope and is prone to cross-site scripting and session fixation vulnerabilities. OpenVAS Vulnerability Test $Id: gbhpsitescopexssnsessionfixationvuln.nasl 5390 2017-02-21 18:39:27Z mime $ HP SiteScope Cross-Site Scripting and Session Fixation Vulnerabilities Authors:...

ATutor 2.0.2 HTTP Response Splitting

ATutor 2.0.2 lang HTTP Response Splitting Vulnerability Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 2.0.2 build r10589 Summary: ATutor is an Open Source Web-based Learning Content Management System LCMS designed with accessibility and...

Joomla Component 'com_astra' SQLi Vulnerability

Joomla Astra component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Chyrp < 2.1.1 Multiple Vulnerabilities

Chyrp is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS

Exploit for php platform in category web applications PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities body bgcolo...

PG eLms Pro vDEC_2007_01 - contact_us.php Multiple POST Cross-Site Scripting Vulnerabilities

PG eLms Pro vDEC200701 - contactus.php Multiple POST Cross-Site Scripting Vulnerabilities PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities scrip...

PG eLms Pro vDEC_2007_01 - 'contact_us.php' Multiple POST Cross-Site Scripting Vulnerabilities

PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities function xss1document.forms"xss".submit; form acti...

LuxCal Web Calendar SQL Injection Vulnerability

LuxCal Web Calendar is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OTRS < 2.3.5 Command Execution Vulnerability

Open Ticket Request System OTRS is prone to a command execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mail Gem for Ruby lib/mail/network/delivery_methods/sendmail.rb Email From: Address Arbitrary Shell Command Injection

Mail Gem for Ruby contains a flaw related to the failure to properly sanitise input passed from an email from address in the 'deliver' function in 'lib/mail/network/deliverymethods/sendmail.rb' before being used as a command line argument. This may allow a remote attacker to inject arbitrary shel...

Shop A La Cart SQL Injection/ Cross Site Scripting

Exploit Title: Multiple vulnerabilities in SHOP A LA CART Date: 03.09.2010 Author: Ariko-Security Software Link: http://shopalacart.com Version: ALL Tested on: ALL CVE : n/a Ariko-Security: Security Audits , Audyt bezpieczeństwa Advisory: 728/2010 ============ Ariko-Security - Advisory 1/9/2010...

Shop a la Cart - Multiple Vulnerabilities

Shop a la Cart - Multiple Vulnerabilities Exploit Title: Multiple vulnerabilities in SHOP A LA CART Date: 03.09.2010 Author: Ariko-Security Software Link: http://shopalacart.com Version: ALL Tested on: ALL CVE : n/a Ariko-Security: Security Audits , Audyt bezpieczeństwa Advisory: 728/2010...