BasiliX Detection

The remote web server contains a webmail application written in PHP. Description : This script detects whether the remote host is running BasiliX and extracts version numbers and locations of any instances found. BasiliX is a webmail application based on PHP and IMAP and powered by MySQL. OpenVAS...

SSL/TLS: Certificate Expiry

The remote server SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15901";...

WorldClient for MDaemon Server Detection

We detected the remote web server is running WorldClient for MDaemon. This web server enables attackers with the proper username and password combination to access locally stored mailboxes. In addition, earlier versions of WorldClient suffer from buffer overflow vulnerabilities, and web traversal...

ReadDesign checker

This plugin checks for ReadDesign vulns on the remote web server. SPDX-FileCopyrightText: 2005 Net-Square Solutions Pvt Ltd. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

foxweb <= 2.5 CGI Buffer Overflow Vulnerability

The foxweb.dll or foxweb.exe CGI is installed. Versions 2.5 and below of this CGI program have a security flaw that lets an attacker execute arbitrary code on the remote server. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are...

AspUpload vulnerability

At least one example script distributed with AspUpload appears to be installed on the remote web server. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

AIX maintenance level

This plugin makes sure the remote AIX server is running the newest maintenance package. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Checks for listrec.pl

The SPDX-FileCopyrightText: 2001 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10769"; scriptversion"2023-08-01T13:29:10+0000"...

YaCy Peer-To-Peer Search Engine XSS

The remote host contains a peer-to-peer search engine that is prone to cross-site scripting attacks. Description : The remote host runs YaCy, a peer-to-peer distributed web search engine and caching web proxy. The remote version of this software is vulnerable to multiple cross-site scripting due ...

bBlog SQL injection flaw

The remote server runs a version of bBlog which is as old as or older than version 0.7.4. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Hidden WWW Server Name (HTTP)

It seems that the remote web server tries to hide its version or name. However, using a special crafted request, the scanner was able to discover it. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

SiteScope Web Managegment Server Detection (HTTP)

The remote web server is running the SiteScope Management web server. SPDX-FileCopyrightText: 2005 Noam Rathaus / SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

YaPiG Remote Server-Side Script Execution Vulnerability

The remote web server contains a PHP application that is prone to arbitrary PHP code injection vulnerabilities. Description : The remote host is running YaPiG, a web-based image gallery written in PHP. The remote version of YaPiG may allow a remote attacker to execute malicious scripts on a...

JS.Scob.Trojan or Download.Ject Trojan

JS.Scob.Trojan or Download.Ject Trojan JS.Scob.Trojan or Download.Ject is a simple Trojan that executes a JavaScript file from a remote server. The Trojan's dropper sets it as the document footer for all pages served by IIS Web sites on the infected computer. The presence of Kk32.dll or Surf.dat...

Windows Administrator NULL FTP password

The remote server is incorrectly configured with a NULL password for the user 'Administrator' and has FTP enabled. OpenVAS Vulnerability Test $Id: ftpadministrator.nasl 6040 2017-04-27 09:02:38Z teissa $ Description: Windows Administrator NULL FTP password Authors: Keith Young Copyright: Copyrigh...

IMP Content-Type XSS Vulnerability

The remote server is running at least one instance of IMP whose version number is between 2.0 and 3.2.3 inclusive. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to cause a victim to unknowingly run arbitrary Javascript code simply by reading a MIME messa...

YusASP Web Asset Manager Vulnerability

YusASP Web Asset Manager is a complete file manager for your website. If left uprotected, the YusASP allows you to anage the remote server SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Horde IMP < 3.2.4 Content-Type XSS Vulnerability

The remote server is running at least one instance of Horde IMP whose version number is between 2.0 and 3.2.3 inclusive. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SOCKS4A Hostname Overflow DoS Vulnerability

It was possible to kill the remote SOCKS4A server by sending a request with a too long hostname. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

MySQL Eventum Multiple flaws

The remote host seems to be running MySQL Eventum, a user-friendly and flexible issue tracking system written in PHP. The remote version of this software is vulnerable to cross-site scripting attacks, through multiple scripts. With a specially crafted URL, an attacker can use the remote server to...