vBulletin 3.6.10/3.7.2 - '$newpm[title]' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30777/info vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

vBulletin 3.6.103.7.2 - $newpm[title] Cross-Site Scripting

vBulletin 3.6.103.7.2 - $newpmtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/30777/info vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Cleartext protocols settings

This script just sets global variables telnet/rexec/rsh logins and passwords that are used to perform host-level patch level checks. You should avoid using these cleartext protocols when doing a scan, as Nessus will basically broadcast the password to every tested host. TRUSTED...

Solaris 9 (x86) : 118536-06

SunOS 5.9x86: sh/jsh/rsh/pfsh Patch. Date this patch was last updated by Sun : Aug/17/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Checkpoint Firewall-1 NG Patch Level FP2 Detection

Binary data 2911.prm...

Checkpoint Firewall-1 Patch Level 0 Detection

Binary data 2904.prm...

Checkpoint Firewall-1 Patch Level 1 Detection

Binary data 2905.prm...

Checkpoint Firewall-1 NG Patch Level FP1 Detection

Binary data 2910.prm...

Checkpoint Firewall-1 Patch Level 2 through 6 Detection

Binary data 2906.prm...

Microsoft IIS Patch Level Detection (English versions only)

Binary data 1722.prm...

Microsoft IIS Patch Level Detection (English versions only)

Binary data 1720.prm...

Microsoft IIS Patch Level Detection (English versions only)

Binary data 1721.prm...

Microsoft IIS Patch Level Detection (English versions only)

Binary data 1718.prm...

Microsoft SQL Server 2000 OpenDataSource Buffer Overflow (#NISR19062002)

NGSSoftware Insight Security Research Advisory Name: OpenDataSource Buffer Overflow Systems: Microsoft SQL Server 2000, all Service Packs Severity: High Risk Category: Remote Buffer Overrun Vulnerability Vendor URL: http://www.microsoft.com/ Author: Mark Litchfield [email protected] Contributo...

sfgate-info.txt

Vendor: http://ls6-www.cs.uni-dortmund.de/ir/projects/SFgate/index.html Action: attempted to notify vendor with no response. Description: SFGATE gives sensitive information by allowing one to view a few lines of text from a file via an error message. It looks like a good attempt was made at...