1558 matches found
PG eLMS Pro vDEC_2007_01 Multiple Blind SQL Injection Vulnerabilities
Summary eLMS Pro solution is an outstanding and yet simple Learning Management system. Our product is designed for any education formations: from small distance training companies up to big colleges and universities. The system allows to build courses, import SCORM content, deploy online learning...
OS X Gather Mac OS X System Information Enumeration
This module gathers basic system information from Mac OS X Tiger 10.4, through Mojave 10.14. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OS X Gather Mac OS X System Information Enumeration'...
Nmap NSE net: broadcast-upnp-info
Attempts to extract system information from the UPnP service by sending a multicast query, then collecting, parsing, and displaying all responses. OpenVAS Vulnerability Test $Id: gbnmapbroadcastupnpinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Patr...
Nmap NSE net: snmp-sysdescr
Attempts to extract system information from an SNMP version 1 service. SYNTAX: snmpcommunity: The community string to use. If not given, it is ''public'', or whatever is passed to 'buildPacket'. OpenVAS Vulnerability Test $Id: gbnmapsnmpsysdescrnet.nasl 5505 2017-03-07 10:00:18Z teissa $...
Nmap NSE net: upnp-info
Attempts to extract system information from the UPnP service. SYNTAX: upnp-info.override: Controls whether we override the IP address information returned by the UPNP service for the location of the XML file that describes the device. Defaults to true for unicast hosts. OpenVAS Vulnerability Test...
Tugux CMS 1.2 Multiple Remote Vulnerabilities
Summary Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web. Description The application suffers from multiple issues including: reflected and stored xss, sql Injection, local file inclusion, url redirection. Vulnerable parameters include:...
Eircom Netopia Router Backdoor
++++++++++++++++++++ FULL DISCLOSURE OF EIRCOM NETOPIA ROUTER BACKDOOR VULNERABILITY! Yes, failcom suck, and they did it again. DERP! They gave us a nice TELNET shell into their routers, and now we can mess about 'cos it spawns a root shell by magic! and magic is the actual command! They also lef...
Family Connections CMS 2.3.2 (POST) Stored XSS And XML Injection
Summary Family Connections is an open source content management system. It makes creating a private, family website easy and fun. Description FCMS suffers from a stored XSS vulnerability post-auth in messageboard.php script thru the 'subject' post parameter. XML Inj. lies in the /inc/getChat.php...
Pointter PHP Content Management System 1.2 Multiple Vulnerabilities
Summary Pointter PHP Content Management System is an advanced, fast and user friendly CMS script that can be used to build simple websites or professional websites with product categorization, product blogs, member login and search modules. The webmaster can create unlimited static page boxes,...
IBM WebSphere Portal Server input validation vulnerability
Overview IBM WebSphere Portal Server does not validate entry path inputted data. Description From the IBM Portal website: "IBM WebSphere Portal software provides a composite application or business mashup framework and the advanced tooling needed to build flexible, SOA-based solutions, as well as...
servicetags NSE Script
Attempts to extract system information OS, hardware, etc. from the Sun Service Tags service agent UDP port 6481. Based on protocol specs from Example Usage nmap -sU -p 6481 --script=servicetags Script Output | servicetags: | URN: urn:st:3bf76681-5e68-415b-f980-abcdef123456 | System: SunOS |...
GAzie 5.10 (Login parameter) Multiple Remote Vulnerabilities
Summary GAzie is a multi-company management program ERP that runs on Apache web server with support for PHP and Mysql database. Open Source web-based application for small and medium enterprises. Description GAzie is prone to a cross-site scripting and an SQL Injection vulnerability because it...
Nmap NSE: SNMP System Description
This script attempts to extract system information from an SNMP version 1 service. This is a wrapper on the Nmap Security Scanner's http://nmap.org snmp-sysdescr.nse. OpenVAS Vulnerability Test $Id: gbnmapsnmpsysdescr.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap SNMP System Descriptio...
CVE-2008-7268
The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to phpinfo in misc.php...
Information disclosure
The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to phpinfo in misc.php...
CVE-2008-7268
SiteEngine 5.x is affected by CVE-2008-7268 via a phpinfo information-disclosure in misc.php when action=php_info is supplied, allowing remote attackers to obtain system information. The connected documents reiterate the description; no remediation patch/version is provided in the supplied source...
broadcast-upnp-info NSE Script
Attempts to extract system information from the UPnP service by sending a multicast query, then collecting, parsing, and displaying all responses. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline,...
Exponent CMS v0.97 Multiple Vulnerabilities
Summary Open Source Content Management System PHP+MySQL. Description Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure Vulnerability 2. Arbitrary File Upload / File Modify Vulnerability 3. Reflected Cross-Site Scripting Vulnerability 1 LFI/FD occurs whe...
PostgreSQL SQL Injection
SQL-Injection в PostgreSQL ::Ошибки:: Итак, мы подставили в параметр кавычку, и что мы видим? Вот типичные ошибки, с которыми мы будем работать: Код: Warning: pgquery: Query failed: ERROR: syntax error at or near "" at character... Warning: pgexec function.pg-exec: Query failed: ERROR: syntax...
