Pixelpost < 1.5 RC1 showimage Parameter SQL Injection

The remote host is running Pixelpost, a photo blog application based on PHP and MySQL. The version of Pixelpost installed on the remote host fails to sanitize input to the 'showimage' parameter of the 'index.php' script before using it to construct database queries. Provided PHP's 'magicquotesgpc...

GLSA-200603-01 : WordPress: SQL injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200603-01 WordPress: SQL injection vulnerability Patrik Karlsson reported that WordPress 1.5.2 makes use of an insufficiently filtered User Agent string in SQL queries related to comments posting. This vulnerability was already...

SUSE-SA:2006:011: heimdal

The remote host is missing the patch for the advisory SUSE-SA:2006:011 heimdal. Heimdal is a Kerberos 5 implementation from the Royal Institut of Techno- logy in Stockholm. This update fixes two bugs in heimdal. The first one occurs in the rsh daemon and allows an authenticated malicious user to...

Limbo CMS index.php Itemid Parameter Arbitrary Command Execution

The remote host is running Limbo CMS, a content-management system written in PHP. The installed version of Limbo fails to sanitize input to the 'Itemid' parameter before using it as part of a search string in an 'eval' statement in the 'classes/adodbt/readtable.php' script. Regardless of PHP's...

FreeBSD nfsd Malformed NFS Mount Request Remote DoS

The NFS server on the remote host appears to be one from FreeBSD that causes a kernel panic when it receives a malformed NFS mount request via TCP. An unauthenticated remote attacker can leverage this flaw to crash the remote host. C Tenable Network Security, Inc. include"compat.inc"; if...

MS Internet Explorer 6.0 SP0 IsComponentInstalled() Remote Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

ViRobot Linux Server filescan Authentication Bypass

The remote host is running ViRobot Linux Server, a commercial antivirus application server. The installed version of ViRobot Linux Server has a flaw such that an attacker can bypass authentication and gain access to its 'filescan' component by supplying a special cookie. An unauthenticated attack...

SUSE-SA:2006:008: openssh

The remote host is missing the patch for the advisory SUSE-SA:2006:008 openssh. A problem in the handling of scp in openssh could be used to execute commands on remote hosts even using a scp-only configuration. This requires doing a remote-remote scp and a hostile server. CVE-2006-0225 On SUSE...

MS06-004: Cumulative Security Update for Internet Explorer (910620)

The remote host is missing the IE cumulative security update 910620. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Tenable Network Security, Inc. include"compat.inc"; if description scriptid20904;...

LinPHA <= 1.0 Multiple Vulnerabilities

The remote host is running LinPHA, a web photo gallery application written in PHP. The installed version of LinPHA suffers from a number of flaws, several of which could allow an unauthenticated attacker to view arbitrary files or to execute arbitrary PHP code on the remote host, subject to the...

ICMP Domain Name Request

The remote host answered to an ICMP 'Domain Name Request' as defined in RFC 1788. Such a request is designed to obtain the DNS name of a host based on its IP. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: RFC 1788 http://www.dolda2000.com/fredrik/icmp-dn/...

WorldMail-3.0.pl.txt

Eudora WorldMail 3.0 Windows 2000 Remote System Exploit November 2005 Tested on Windows 2000 Server SP4 infoATcom-winner.com http://www.com-winner.com http://www.com-winner.com/CWCOM/cwc-index/ use IO::Socket::INET; use strict; win32bind - EXITFUNC=seh LPORT=4444 Size=344 Encoder=PexFnstenvSub...

RCBlog index.php post Parameter Traversal Arbitrary File Access

The remote host is running RCBlog, a blog written in PHP. The remote version of this software fails to sanitize user-supplied input to the 'post' parameter of the 'index.php' script. An attacker can use this to access arbitrary files on the remote host provided PHP's 'magicquotes' setting is...

GLSA-200601-13 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200601-13 Gallery: XSS vulnerability Peter Schumacher discovered that Gallery fails to sanitize the fullname set by users, possibly leading to a cross-site scripting vulnerability. Impact : By setting a specially crafted fullname,...

Novell Open Enterprise Server Remote Manager (novell-nrm) POST Request Content-Length Overflow

The remote host is running Novell Remote Manager HTTP service for SuSE Enterprise or Open Enterprise Server. The remote version of this software is vulnerable to a heap overflow attack that may be exploited by sending a negative value for the 'Content-Length' field. Since the 'httpstkd' service...

CA DMPrimer Service Detection

The remote host is running the CA DMPrimer service DM Deployment Common Component. This service is bundled with products such as BrightStor ARCserve Backup for Laptops & Desktops, Unicenter Remote Control, CA Protection Suite, etc... C Tenable Network Security, Inc. include"compat.inc";...

HomeFtp 1.1 - NLST Denial of Service

HomeFtp 1.1 - NLST Denial of Service / HomeFtp v1.1 Denial of Service original advisory: http://kapda.ir/advisory-202.html homeftpv1.1xpl.c ---------------------------------------- / include include include include include define POCSTR "USER %s\x0d\x0aPASS %s\x0d\x0aNLST\x0d\x0a" int header; int...

Microsoft Windows XP2003 - Metafile Escape() Code Execution (Metasploit)

Microsoft Windows XP2003 - Metafile Escape Code Execution Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the cor...

Multiple vulnerability scanners cross application scripting

Unsafe data obtained during remote host scan is passed to Internet Explorer...

SimpleBBS topics.php name Parameter Arbitrary Command Execution

The remote host appears to be running SimpleBBS, an open source bulletin board system written in PHP. The version of SimpleBBS installed on the remote host fails to sanitize user-supplied input to the 'name' parameter of the 'index.php' script when creating a new topic and adds that input to...