Amazon Linux AMI : php56 / php70,php71,php72 (ALAS-2019-1147)

ext/imap/phpimap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty string in the message argument to the imapmail function.CVE-2018-19935 University of Washington IMAP Toolkit 2007f on UNIX, as used i...

BlogEngine 3.3 - XML External Entity Injection

BlogEngine 3.3 - XML External Entity Injection XML External Entity Injection Vulnerability in BlogEngine 3.3 Information -------------------- Advisory by Netsparker Name: XML External Entity Injection Vulnerability in BlogEngine 3.3 Affected Software: BlogEngine Affected Versions: 3.3 Homepage:...

OrangeForum 1.4.0 Open Redirection

Open Redirection Vulnerabilities in OrangeForum 1.4.0 Information -------------------- Advisory by Netsparker Name: Open Redirection Vulnerabilities in OrangeForum 1.4.0 Affected Software: OrangeForum Affected Versions: 1.4.0 Homepage: https://github.com/s-gv/orangeforum Vulnerability: Open...

Ampache 3.8.6 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Multiple Reflected Cross-site Scripting Vulnerabilities in Ampache 3.8.6 Information -------------------- Advisory by Netsparker Name: Multiple Reflected Cross-site Scripting in Ampache 3.8.6 Affected Software: Ampache Affected Versions: 3.8.6...

PHP 5.6.x < 5.6.36 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.36. It is, therefore, affected by multiple vulnerabilities. Note that the scanner has not attempted to exploit this issue but has instead relied only on the application's self-reported version numbe...

PHP 7.0.x < 7.0.8 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.8. It is, therefore, affected by multiple vulnerabilities : - An integer overflow condition exists in the gd2GetHeader function in file ext/gd/libgd/gdgd2.c due to improper validation of user-suppli...

BlogEngine 3.3 - XML External Entity Injection Vulnerability

Exploit for windows platform in category web applications XML External Entity Injection Vulnerability in BlogEngine 3.3 Information -------------------- Advisory by Netsparker Name: XML External Entity Injection Vulnerability in BlogEngine 3.3 Affected Software: BlogEngine Affected Versions: 3.3...

Ampache 3.8.6 Cross Site Scripting

Multiple Reflected Cross-site Scripting Vulnerabilities in Ampache 3.8.6 Information -------------------- Advisory by Netsparker Name: Multiple Reflected Cross-site Scripting in Ampache 3.8.6 Affected Software: Ampache Affected Versions: 3.8.6 Homepage: http://ampache.org Vulnerability: Reflected...

BlogEngine 3.3 XML External Entity Injection

XML External Entity Injection Vulnerability in BlogEngine 3.3 Information -------------------- Advisory by Netsparker Name: XML External Entity Injection Vulnerability in BlogEngine 3.3 Affected Software: BlogEngine Affected Versions: 3.3 Homepage: https://blogengine.io/ Vulnerability: XML Extern...

Splunk Enterprise 6.0.x < 6.0.14 / 6.1.x < 6.1.13 / 6.2.x < 6.2.14 / 6.3.x < 6.3.11 / 6.4.x < 6.4.8 / 6.5.x < 6.5.3 or Splunk Light < 6.6.0 Multiple Vulnerabilities

According to its self-reported version number, the version of Splunk running on the remote web server is Splunk Light prior to 6.6.0 or Splunk Enterprise 6.0.x prior to 6.0.14, 6.1.x prior to 6.1.13, 6.2.x prior to 6.2.14, 6.3.x prior to 6.3.11, 6.4.x prior to 6.4.8, or 6.5.x prior to 6.5.3. It i...

PHP 7.2.x < 7.2.5 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.5. It is, therefore, affected by multiple vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No...

GeniXCMS 1.1.5 Cross Site Scripting

Multiple Cross-site Scripting Vulnerabilities in GeniXCMS 1.1.5 Information -------------------- Advisory by Netsparker Name: Cross-site Scripting Vulnerabilities in GeniXCMS Affected Software: GeniXCMS Affected Versions: 1.1.5 Homepage: https://github.com/semplon/GeniXCMS Vulnerability: Cross-si...

Family Connections 3.7.0 Cross Site Scripting

Multiple Cross-site Scripting Vulnerabilities in Family Connections 3.7.0 Information -------------------- Advisory by Netsparker Name: Multiple Reflected Cross-site Scripting Vulnerabilities in Family Connections Affected Software: Family Connection Affected Versions: 3.7.0 Homepage:...

Microweber 1.0.8 Cross Site Scripting

Reflected Cross-site Scripting Vulnerability in Microweber 1.0.8 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting in Microweber Affected Software: Microweber Affected Versions: 1.0.8 Homepage: https://github.com/microweber/microweber Vulnerability:...

ForkCMS 5.0.6 Cross Site Scripting

Stored Cross-site Scripting Vulnerabilities in ForkCMS 5.0.6 Information -------------------- Advisory by Netsparker Name: Stored Cross-site Scripting Vulnerabilities in ForkCMS Affected Software: ForkCMS Affected Versions: 5.0.6 Homepage: https://www.fork-cms.com/ Vulnerability: Stored Cross-sit...

pfSense 2.3.x < 2.3.5-p2 / 2.4.x < 2.4.3-p1 Multiple Vulnerabilities (SA-18_04 / SA-18_05)

According to its self-reported version number, the remote pfSense install is a version 2.3.x prior to 2.3.5-p2 or 2.4.x prior to 2.4.3-p1. It is, therefore, affected by multiple vulnerabilities: - In FreeBSD before 11.1-STABLEr332066 and 11.1-RELEASE-p10, due to insufficient initialization of...

Amazon Linux AMI : golang (ALAS-2018-1130)

In Go before 1.10.6 and 1.11.x before 1.11.3, the 'go get' command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go package, or a package that imports it directly or indirectly. Specifically, it is only vulnerable in GOPATH mode, but not ...

SolarWinds Network Operations Manager Detection (Windows SMB Login)

This script detects the installed version of SolarWinds Network Operations Manager for Windows. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreshRSS 1.11.1 - Cross-Site Scripting

FreshRSS 1.11.1 - Cross-Site Scripting Multiple Cross-Site Scripting Vulnerabilities in FreshRSS 1.11.1 Information -------------------- Advisory by Netsparker Name: Multiple Cross-Site Scripting Vulnerabilities in FreshRSS Affected Software: FreshRSS Affected Versions: 1.11.1 Homepage:...

CubeCart 6.2.2 Cross Site Scripting

Reflected Cross-site Scripting Vulnerability in CubeCart 6.2.2 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting Vulnerability in CubeCart Affected Software: CubeCart Affected Versions: 6.2.2 Homepage: https://www.cubecart.com/ Vulnerability: Reflected...