PHP 5.3.x < 5.3.23 Multiple Vulnerabilities

According to its banner, the version of PHP 5.3.x installed on the remote host is prior to 5.3.23. It is, therefore, potentially affected by multiple vulnerabilities: - An error exists in the file 'ext/soap/soap.c' related to the 'soap.wsdlcachedir' configuration directive and writing cache files...

Matrix42 Service Store - 'default.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/59290/info Matrix42 Service Store is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

PHP 5.3.x < 5.3.13 CGI Query String Code Execution

According to its banner, the version of PHP installed on the remote host is 5.3.x earlier than 5.3.13 and, as such, is potentially affected by a remote code execution and information disclosure vulnerability. The fix for CVE-2012-1823 does not completely correct the CGI query vulnerability...

SecurStar DriveCrypt 'DCR.sys' IOCTL Handling Privilege Escalation Vulnerability

This host is installed with SecurStar DriveCrypt and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbdrivecryptioctlprivescvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ SecurStar DriveCrypt 'DCR.sys' IOCTL Handling Privilege Escalation Vulnerability Authors:...

SecurStar DriveCrypt 'DCR.sys' IOCTL Handling Privilege Escalation Vulnerability

SecurStar DriveCrypt is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Update for php MDVA-2011:006 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVA-2011:006 php Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

PHP 5.2.x < 5.2.17 / 5.3.x < 5.3.5 String To Double Conversion DoS

Binary data 5740.prm...

PHP 5.3.x < 5.3.4 Multiple Vulnerabilities

Binary data 5732.prm...

EUVD-2010-4132

The mbstrcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter aka the length parameter...

PHP 5.2.11, 5.3.x < 5.3.1 Multiple Vulnerabilities (Dec 2009)

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

PHP 5.3.x < 5.3.1 Multiple Vulnerabilities

Binary data 5242.prm...

PHP 5.3.x < 5.3.1 Multiple Vulnerabilities

Binary data 801090.prm...

Design/Logic Flaw

PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST request, which allows remote attackers to cause a denial of service resource exhaustion, and makes it easier for remote attackers to exploit local file inclusi...

CVE-2009-4017

PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST request, which allows remote attackers to cause a denial of service resource exhaustion, and makes it easier for remote attackers to exploit local file inclusi...

RSA WebID 5.3 - IISWebAgentIF.dll Cross-Site Scripting

RSA WebID 5.3 - IISWebAgentIF.dll Cross-Site Scripting source: https://www.securityfocus.com/bid/28277/info RSA WebID is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

CVE-2007-5597

The hookcomments API in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 does not pass publication status, which might allow attackers to bypass access restrictions and trigger e-mail with unpublished comments from some modules, as demonstrated by 1 Organic groups and 2 Subscriptions...

SA-2007-025 - Drupal core - Arbitrary code execution via installer.

The Drupal installer allows any visitor to provide credentials for a database when the site's own database is not reachable. This allows attackers to run arbitrary code on the site's server. An immediate workaround is the removal of the file install.php in the Drupal root directory. Versions...

Winamp &lt;= 5.3 (WMV File) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl --------------------------------- Winamp = WMV 5.3 Buffer Overflow DOS Exploit 0-DAY --------------------------------- Type : Buffer Overflow - DOS Release Date : 2007-04-16 Product / Vendor : Winamp Media Player http://www.winamp.com/ Exploit :...

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/15948/info Web Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

Hot Banana XSS vuln.

Hot Banana XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/hot-banana-xss-vuln.html vendor:www.hotbanana.com/products/web-content-management-suite/ affected version: 5.3 and prior Description: Founded in 1999, Hot Banana powers Web sites...