W-Agora 4.1.5 - Local File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/44507/info W-Agora is prone to multiple local file-include vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to view and execute local...

NitroView ESM - ess.pm Remote Command Execution

NitroView ESM - ess.pm Remote Command Execution source: https://www.securityfocus.com/bid/44421/info NitroView ESM is prone to a remote command-execution vulnerability because it fails to adequately sanitize user-supplied input. Successful attacks may allow an attacker to execute arbitrary comman...

NitroView ESM - 'ess.pm' Remote Command Execution

source: https://www.securityfocus.com/bid/44421/info NitroView ESM is prone to a remote command-execution vulnerability because it fails to adequately sanitize user-supplied input. Successful attacks may allow an attacker to execute arbitrary commands on the appliance in the context of the...

MinaliC Webserver 1.0 Directory Traversal

------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Directory Traversal Download................http://sourceforge.net/projects/minalic/ Release Date............10/24/2010 Tested On...............Windows XP...

MinaliC Webserver 1.0 Denial Of Service

------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Denial Of Service Download................http://sourceforge.net/projects/minalic/ Release Date............10/24/2010 Tested On...............Windows XP...

w-Agora 'search.php' Local File Include and Cross Site Scripting Vulnerabilities

w-Agora is prone to a local file-include vulnerability and a cross- site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the...

W-Agora 4.2.1 - search.php?bn Cross-Site Scripting

W-Agora 4.2.1 - search.php?bn Cross-Site Scripting source: https://www.securityfocus.com/bid/44370/info w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local...

W-Agora 4.2.1 - search.php3?bn Traversal Local File Inclusion

W-Agora 4.2.1 - search.php3?bn Traversal Local File Inclusion source: https://www.securityfocus.com/bid/44370/info w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the...

W-Agora 4.2.1 - 'search.php?bn' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44370/info w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal...

W-Agora 4.2.1 - 'search.php3?bn' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/44370/info w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal...

PhreeBooks Multiple Remote Vulnerabilities

PhreeBooks is prone to multiple input-validation vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or obtain potentially...

Multiple Vulnerabilities in JAF CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in JAF CMS which could be exploited to compromise vulnerable system. 1 Remote code execution in JAF CMS The vulnerability exists due to insufficient sanitation of input data in module/log/vislog.php. A remote attack...

SA-CONTRIB-2010-100 - Ubuntu Drupal Theme - Directory traversal and information disclosure

This Ubuntu Drupal Theme - Brown is designed to mimic the old ubuntu.com. The theme used a PHP file to generate a gradient image on the fly. User input from the URL is not properly validated in this PHP code, leading to a directory traversal vulnerability where the contents of any file readable b...

BaconMap Local File Include and SQL Injection Vulnerabilities

BaconMap is prone to a local file-include vulnerability and an SQL- injection vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory- traversal strings to view and execute arbitrary local files within...

Joomla! Component Jstore - Controller Local File Inclusion

Joomla! Component Jstore - Controller Local File Inclusion source: https://www.securityfocus.com/bid/44053/info The 'comjstore' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerabilit...

Joomla! Component Jstore - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/44053/info The 'comjstore' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute...

Microsoft IIS ASP Stack Based Buffer Overflow Vulnerability

The host is running Microsoft IIS Webserver and is prone to stack based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbmsiisbofvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Microsoft IIS ASP Stack Based Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 201...

LightOpenCMS 'smarty.php' LFI Vulnerability

LightOpenCMS is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may...

Uebimiau Webmail 'stage' Parameter Local File Include Vulnerability

Uebimiau Webmail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. This ma...

Uebimiau Webmail 'stage' Parameter Local File Include Vulnerability

Uebimiau Webmail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...