HP Managed Printing Administration Detection

HP Managed Printing Administration, a web-based printer administration interface, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57699; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"HP Managed Printing...

op5 Portal Detection

The remote web server hosts op5 Portal, a web interface platform that contains several other components produced by op5, notably op5 Monitor. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57575; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...

SAPID CMS <= 1.2.3 Multiple RFI Vulnerabilities - Active Check

SAPID CMS is prone to multiple remote file include RFI vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

VertrigoServ 'ext' Parameter Cross Site Scripting Vulnerability

This host is running VertrigoServ and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbvertrigoservextparamxssvuln.nasl 5792 2017-03-30 13:18:14Z cfi $ VertrigoServ 'ext' Parameter Cross Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2012...

phpMyAdmin Setup '$host' Variable Cross Site Scripting Vulnerability

phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HP OpenView Network Node Manager Multiple RCE Vulnerabilities

HP OpenView Network Node Manager NNM is prone to multiple remote code-execution vulnerabilities because it fails to sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Joomla 'BF Quiz' Component 'catid' Parameter SQL Injection Vulnerability

This host is running Joomla! with BF Quiz component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomcombfquiztrialsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla 'BF Quiz' Component 'catid' Parameter SQL Injection Vulnerability Authors: Madhuri D...

WikkaWiki Multiple Security Vulnerabilities

WikkaWiki is prone to multiple security vulnerabilities, including: - An SQL injection vulnerability. - An arbitrary file upload vulnerability. - An arbitrary file deletion vulnerability. - An arbitrary file download vulnerability. - A PHP code injection vulnerability. SPDX-FileCopyrightText: 201...

Manx Multiple Cross Site Scripting and Directory Traversal Vulnerabilities

Manx is prone to multiple cross-site scripting and directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

PHP ip2long Function String Validation Weakness

According to its banner, the 'ip2long' function in the version of PHP installed on the remote host may incorrectly validate an arbitrary string and return a valid network IP address. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Dell KACE K2000 Backdoor

The Dell KACE K2000 System Deployment Appliance contains a hidden administrator account that allow a remote attacker to take control of an affected device. OpenVAS Vulnerability Test $Id: gbdellkace2000backdoor.nasl 3117 2016-04-19 10:19:37Z benallard $ Dell KACE K2000 Backdoor Authors: Michael...

CaupoShop 'template' Parameter Local File Include Vulnerability

CaupoShop is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the Web server process. This may all...

Joomla Multiple Components SQL Injection Vulnerabilities

This host is running Joomla with multiple components and is prone to SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbjoomlamultcomponentssqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Joomla Multiple Components SQL Injection Vulnerabilities Authors: Madhuri D Copyright:...

eFront <= 3.6.10 build 11944 Multiple XSS Vulnerabilities

eFront is prone to multiple cross-site scripting XSS vulnerabilities because the software fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Symantec IM Manager <= 8.4.17 Multiple Vulnerabilities

Symantec IM Manager is prone to multiple vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

ColdGen ColdCalendar 'EventID' SQL Injection Vulnerability

ColdGen ColdCalendar is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CodeMeter WebAdmin 'Licenses.html' Cross Site Scripting Vulnerability

CodeMeter WebAdmin is prone to a cross-site scripting XSS vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

eyeOS '.php' Files Information Disclosure Vulnerability

eyeOS is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MantisBT < 1.2.8 Multiple Local File Include and XSS Vulnerabilities

MantisBT is prone to multiple local file include and cross-site scripting XSS vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-lat...

Digital College <= 1.1 Multiple RFI Vulnerabilities - Active Check

Digital College is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...