4084 matches found
Directory traversal
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related...
CVE-2007-4061
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related...
CVE-2007-4062
CVE-2007-4062 affects Nessus Vulnerability Scanner 3.0.6 via the SCANCTRL.ScanCtrlCtrl.1 ActiveX (scan.dll). The vulnerability arises in the deleteNessusRC method, likely a directory traversal, allowing remote attackers to delete arbitrary files. Related Nessus NASL indicates Nessus for Windows v...
CVE-2007-4061
CVE-2007-4061 : Directory traversal via .. in the Nessus ScanCtrl ActiveX (SCANCTRL.ScanCtrlCtrl.1 in scan.dll) allows remote creation/overwrite of arbitrary files through saveNessusRC, potentially enabling code execution by writing to a Startup folder. Affected product: Nessus Vulnerability Scan...
CVE-2007-4061
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related...
CVE-2007-4031
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. dot dot in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll...
CVE-2007-4031
CVE-2007-4031 affects Nessus Vulnerability Scanner for Windows prior to 3.0.6.1, in the ScanCtrl ActiveX control (SCANCTRL.ScanCtrlCtrl.1 in scan.dll). The flaw allows directory traversal: an attacker who lures a user to a crafted page can cause deleteReport to send a .. path, enabling deletion o...
Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution
Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.addsetConfig'shutdown -t 1000 -s -c "hello world ;" && pause', '', ''; obj.saveNessusRC"../../../../../../Documents and Settings/All Users/Menu...
Nessus Vulnerability Scanner 3.0.6 ActiveX Command Exec Exploit
No description provided by source. HTML !-- Nessus Vulnerability Scanner 3.0.6 ActiveX 0day Remote Code Execution Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- object id="obj"...
Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit
No description provided by source. HTML !-- Nessus Vulnerability Scanner 3.0.6 ActiveX deleteReport 0day Remote Delete File Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; --...
Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution
Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.addsetConfig'shutdown -t 1000 -s -c "hello world ;" && pause', '', ''; obj.saveNessusRC"../../../../../../Documents and Settings/All Users/Menu Start/Programy/Autostart/exec.bat"; milw0rm.com 2007-07-27...
Nessus Vulnerability Scanner 3.0.6 ActiveX Command Exec Exploit
Exploit for unknown platform in category remote exploits =============================================================== Nessus Vulnerability Scanner 3.0.6 ActiveX Command Exec Exploit =============================================================== Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Ju...
Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit
Exploit for unknown platform in category remote exploits ===================================================================== Nessus Vulnerability Scanner 3.0.6 ActiveX Remote Delete File Exploit ===================================================================== Tested on Nessus 3.0.6 / IE 6 ...
Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File
Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.deleteReport"../../../../../../../test.txt"; //Deleting file: C:\test.txt alert"done"; milw0rm.com 2007-07-26...
Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File
Tested on Nessus 3.0.6 / IE 6 / XP SP2 Polish Just for fun ; -- obj.deleteReport"../../../../../../../test.txt"; //Deleting file: C:\test.txt alert"done"; milw0rm.com 2007-07-26...
JVN#34058672 Nessus report function vulnerable to arbitrary script execution
Nessus, a vulnerability scanner from Tenable Network Security, Inc., is capable of providing test reports in HTML format. The report in HTML format contains the target server's responses against Nessus scanning. Nessus fails to properly handle the responses. This may cause a script to be executed...
Cross site scripting
Cross-site scripting XSS vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-3546
Cross-site scripting XSS vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
RedLevel Advisory #021 - CubeCart v3.0.16 SQL Injection Vulnerability
An interesting SQL injection vulnerability was discovered in CubeCart v3.0.16. This vulnerability cannot easily be exploited by traditional means - in fact, the actual vulnerable variable was not discovered. As a piece of user input is passed to CubeCart, it is sanitized through a routine mySQLSa...
