5495 matches found
Ignition Multiple Local File Include and Remote Code Execution Vulnerabilities
Ignition is prone to multiple local file-include vulnerabilities and a remote code execution vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and to execute arbitrary local scripts an...
Mongoose Webserver Content-Length Denial of Service Vulnerability
This host is running Mongoose Webserver and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodmongoosewebsrvcntlendosvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Mongoose Webserver Content-Length Denial of Service Vulnerability Authors: Veerendra GG Copyright:...
IBM Tivoli Access Manager 6.1.1 for E-Business - Directory Traversal
source: https://www.securityfocus.com/bid/45582/info IBM Tivoli Access Manager for e-business is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the contex...
IBM Tivoli Access Manager 6.1.1 for E-Business - Directory Traversal
IBM Tivoli Access Manager 6.1.1 for E-Business - Directory Traversal source: https://www.securityfocus.com/bid/45582/info IBM Tivoli Access Manager for e-business is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue...
Calibre 0.7.34 - Cross-Site Scripting / Directory Traversal
source: https://www.securityfocus.com/bid/45532/info Calibre is prone to a cross-site scripting vulnerability and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in t...
Calibre 0.7.34 - Cross-Site Scripting Directory Traversal
Calibre 0.7.34 - Cross-Site Scripting Directory Traversal source: https://www.securityfocus.com/bid/45532/info Calibre is prone to a cross-site scripting vulnerability and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues wi...
MantisBT <=1.2.3 (db_type) Cross-Site Scripting & Path Disclosure
Exploit for php platform in category web applications Vendor: MantisBT Group Product web page: http://www.mantisbt.org Version affected: 1.2.4 Summary: MantisBT is a free popular web-based bugtracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL...
Joomla! Component com_redirect 1.5.19 - Local File Inclusion
source: https://www.securityfocus.com/bid/45364/info The 'comredirect' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute...
Joomla! Component com_redirect 1.5.19 - Local File Inclusion
Joomla! Component comredirect 1.5.19 - Local File Inclusion source: https://www.securityfocus.com/bid/45364/info The 'comredirect' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this...
Exponent CMS Multiple Input Validation Vulnerabilities
Exponent CMS is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include local file-include, information-disclosure, arbitrary-file-upload, arbitrary-file-modify, and cross-site-scripting vulnerabilities...
MinaliC Webserver Denial of Service Vulnerability
MinaliC Webserver is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for mantis FEDORA-2010-15061
Check for the Version of mantis OpenVAS Vulnerability Test Fedora Update for mantis FEDORA-2010-15061 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
LittlePhpGallery 'gallery.php' Local File Include Vulnerability
LittlePhpGallery is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. This ma...
LittlePhpGallery <= 1.0.2 LFI Vulnerability
LittlePhpGallery is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Awstats Configuration File Remote Arbitrary Command Execution Vulnerability
Awstats is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user- supplied input. An attacker can exploit this vulnerability to execute arbitrary shell commands in the context of the webserver process. This may help...
Awstats < 7.0 Configuration File Remote Arbitrary Command Execution Vulnerability
Awstats is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
AWStats 6.x - Apache Tomcat Configuration File Arbitrary Command Execution
AWStats 6.x - Apache Tomcat Configuration File Arbitrary Command Execution source: https://www.securityfocus.com/bid/45123/info Awstats is prone to an arbitrary command-execution vulnerability. This issue occurs when Awstats is used along with Apache Tomcat in Microsoft Windows. An attacker can...
Joomla Component 'com_jimtawl' <= 1.0.2 LFI Vulnerability - Active Check
The SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; if description scriptoid"1.3.6.1.4.1.25623.1.0.100919";...
Joomla Component 'com_img' Local File Include Vulnerability
The 'comimg' component for Joomla! is prone to a local file- include vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver...
Joomla Component 'com_jimtawl' Local File Include Vulnerability
The 'comjimtawl' component for Joomla! is prone to a local file- include vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the...