Options for Local Security Checks

This script allows users to set some Options for Local Security Checks. These data are stored in the knowledge base and used by other tests. OpenVAS $Id: lscoptions.nasl 7822 2017-11-20 08:46:09Z cfischer $ Description: This script allows to set some Options for LSC. Authors: Michael Meyer...

Interspire Knowledge Manager 5.1.3 - Multiple Remote Vulnerabilities

Interspire Knowledge Manager 5.1.3 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/38090/info Interspire Knowledge Manager is prone to multiple SQL-injection vulnerabilities, a cross-site scripting vulnerability, and an information-disclosure vulnerability. Exploiting...

Interspire Knowledge Manager < 5.1.3 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/38090/info Interspire Knowledge Manager is prone to multiple SQL-injection vulnerabilities, a cross-site scripting vulnerability, and an information-disclosure vulnerability. Exploiting these issues could allow an attacker to obtain sensitive information,...

Interspire Knowledge Manager 5 - 'callback.snipshot.php' Arbitrary File Creation

source: https://www.securityfocus.com/bid/38186/info Interspire Knowledge Manager is prone to a vulnerability that allows attackers to create arbitrary files on a vulnerable computer. An attacker may exploit this issue to create arbitrary files, which may then be executed to perform unauthorized...

Interspire Knowledge Manager 5 - callback.snipshot.php Arbitrary File Creation

Interspire Knowledge Manager 5 - callback.snipshot.php Arbitrary File Creation source: https://www.securityfocus.com/bid/38186/info Interspire Knowledge Manager is prone to a vulnerability that allows attackers to create arbitrary files on a vulnerable computer. An attacker may exploit this issue...

Helpdesk Pilot Knowledge Base SQL Injection

Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version : 4.4.0 or lower maybe also affected ...

Helpdesk Pilot Knowledge Base SQL injection vulnerability

No description provided by source. Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version :...

Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection

Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version : 4.4.0 or lower maybe also affected ...

Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection

Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download...

Helpdesk Pilot Knowledge Base SQL injection vulnerability

Exploit for unknown platform in category web applications ========================================================= Helpdesk Pilot Knowledge Base SQL injection vulnerability ========================================================= Software Information + Vendor : http://www.helpdeskpilot.com/ +...

EasyMail SMTP ActiveX Control AddAttachment buffer overflow

Added: 12/10/2009 BID: 36440 OSVDB: 59939 Background QuikSoft EasyMail Objects is a set of ActiveX controls which provide e-mail functionality. QuikSoft EasyMail Objects is included with Oracle Document Capture among other products. Problem A stack buffer overflow vulnerability in the...

Directory traversal

Directory traversal vulnerability in dialog/filemanager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4192

Interspire Knowledge Manager 5 contains a directory traversal vulnerability in dialog/file_manager.php that allows remote attackers to read arbitrary files by manipulating the p parameter (".." traversal). The issue is documented across multiple feeds (NVD, Red Hat, CVE lists) with the same root ...

MediaWiki Language Option PHP Code Execution (CVE-2005-4031)

MediaWiki is a web-based enterprise collaboration platform developed in the PHP scripting language. The software is a set of CGI programs that are loaded and executed by an HTTP server. It typically runs as a document management system, or a knowledge base. The web content of a MediaWiki...

Tips for Diminishing Botnet Attacks

Online, the biggest battle these days is against botnets: networks of infected computers which hackers can use — unbeknownst to the machine’s owner — for online crimes including sending out spam or launching a denial of service attack. The black-hat techniques employed to snare users into a botne...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

EMC Captiva QuickScan Pro KeyHelp ActiveX Control JumpURL buffer overflow

Added: 10/02/2009 BID: 36546 OSVDB: 58423 Background EMC Captiva QuickScan Pro is a document capture solution. It includes KeyHelp, a free ActiveX control used for enhancing HTML help systems. Problem A buffer overflow vulnerability in the KeyHelp ActiveX Control allows command execution when a...

EMC Captiva QuickScan Pro KeyHelp ActiveX Control JumpURL buffer overflow

Added: 10/02/2009 BID: 36546 OSVDB: 58423 Background EMC Captiva QuickScan Pro is a document capture solution. It includes KeyHelp, a free ActiveX control used for enhancing HTML help systems. Problem A buffer overflow vulnerability in the KeyHelp ActiveX Control allows command execution when a...

Interspire Knowledge Manager 5 - 'p' Directory Traversal

source: https://www.securityfocus.com/bid/36541/info Interspire Knowledge Manager is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in furthe...

Interspire Knowledge Manager 5 - p Directory Traversal

Interspire Knowledge Manager 5 - p Directory Traversal source: https://www.securityfocus.com/bid/36541/info Interspire Knowledge Manager is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker t...