CVE-2007-2205

This CVE (CVE-2007-2205) is a PHP remote file inclusion in LAN Management System (LMS) prior to or around version 1.5.3/1.5.4. The vulnerability is triggered in modules/rtmessageadd.php via the _LIB_DIR parameter, enabling an attacker to load a crafted URL and execute arbitrary PHP code. The avai...

CVE-2007-2205

PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System LMS 1.5.3, and possibly 1.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter, a different vector than CVE-2007-1643...

Cross site scripting

Cross-site scripting XSS vulnerability in LAN Management System LMS before 1.6.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving the OD parameter to contrib/formularzprzelewuwplaty/druk.php...

CVE-2007-2198

Cross-site scripting XSS vulnerability in LAN Management System LMS before 1.6.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving the OD parameter to contrib/formularzprzelewuwplaty/druk.php...

CVE-2007-2198

CVE-2007-2198 describes a cross-site scripting (XSS) vulnerability in the LAN Management System (LMS) prior to 1.6.9. The issue allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors, with likely involvement of the OD parameter in contrib/formularz_przelewu_wplaty...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in LAN Management System LMS 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGdirectoriesuserpaneldir parameter to userpanel.php or the 2 LIBDIR parameter to welcome.php...

CVE-2007-1643

Multiple PHP remote file inclusion vulnerabilities in LAN Management System LMS 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGdirectoriesuserpaneldir parameter to userpanel.php or the 2 LIBDIR parameter to welcome.php...

CVE-2007-1643

CVE-2007-1643 describes multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 and earlier. The issue allows an attacker to execute arbitrary PHP code by supplying a URL via either (1) CONFIG[directories][userpanel_dir] to userpanel.php or (2) _LIB_DIR to welcome....

CVE-2007-1643

Multiple PHP remote file inclusion vulnerabilities in LAN Management System LMS 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGdirectoriesuserpaneldir parameter to userpanel.php or the 2 LIBDIR parameter to welcome.php...

CiscoWorks Management Console Detection (HTTP)

This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2006 TNS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.19559";...

CiscoWorks Management Console Detection

The remote host appears to be running CiscoWorks, a LAN Management solution, on this port. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid19559; scriptversion"1.12"; scriptnameenglish:"CiscoWorks Management Console Detection"; scriptsummaryenglish:"Checks for...

rsh Unauthenticated Access (via finger Information)

Using common usernames as well as the usernames reported by 'finger', Nessus was able to log in through rsh. Either the accounts are not protected by passwords or the /.rhosts files are not configured properly. This vulnerability is confirmed to exist in Cisco Prime LAN Management Solution, but...