698 matches found
BlueSoft Auction Site SQL Injection Vulnerability
BlueSoft Auction Site is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Joomla Resman Cross Site Scripting Vulnerability
This host is running Joomla Resman component and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomresmanxssvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Joomla Resman Cross Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 Greenbo...
Copyscape SQL Injection Vulnerability
Copyscape is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Switzerland & Italian police arrest 15 suspected Anonymous members
Switzerland & Italian police arrest 15 suspected Anonymous members Switzerland & Italian police claimed on Tuesday to have arrested some members of the Legion group Anonymous following a series of raids. The arrests were made by the Polizia postale e delle comunicazioni, or Polizia Postale, which...
Ollance Member Login script Multiple Vulnerabilities
Ollance Member Login script is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Anonymous Hackers target Orlando websites & #OpOrlando Press Release
Anonymous Hackers target Orlando websites & OpOrlando Press Release The next target for the hacktivist group known as Anonymous will be the city of Orlando. Anonymous has reportedly shut down the Orlando Chamber of Commerce website. In One Press Release Anonymous Call To Arms In Op Orlando...
Movable Type User Registration Restriction Bypass
The version of Movable Type running on the remote host has a restriction bypass vulnerability. It is possible to create new user accounts even when registration has been disabled in the blog configuration. A remote attacker could exploit this to register new accounts for blogs that do not allow...
MS11-051: Vulnerability in Active Directory Certificate Services Web Enrollment Could Allow Elevation of Privilege (2518295) (uncredentialed check)
Active Directory Certificate Services Web Enrollment is installed on the remote host. The remote version of this software is vulnerable to a cross-site scripting vulnerability that could allow an attacker to inject a client-side script into the user's web browser instance. %NASLMINLEVEL 70300 C...
allocPSA <= 1.7.4 XSS Vulnerability - Active Check
allocPSA is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Joomla Component com_aist SQLi Vulnerability - Active Check
Joomla! is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...
HP SiteScope Detection
The remote host is running HP SiteScope, an agentless network monitoring application. HP SiteScope was formerly known as Mercury SiteScope. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53621; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate"...
Atlassian Confluence Wiki Detection
Atlassian Confluence, a wiki written in Java, is running on the remote web server. Note: The plugin supports authentication when HTTP basic or digest access credentials are supplied in the configuration. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53574;...
Symantec LiveUpdate Administrator Web Detection
Symantec LiveUpdate Administrator LUA was detected on the remote host. LUA provides centralized management for multiple internal LiveUpdate servers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53208; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22";...
phpBugTracker Multiple Reflected Cross Site Scripting Vulnerabilities
This host is running phpBugTracker and is prone to multiple reflected cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodphpbugtrackermultiplexss.nasl 7029 2017-08-31 11:51:40Z teissa $ phpBugTracker Multiple Reflected Cross Site Scripting Vulnerabilities Authors: Antu...
Icinga Multiple Cross-Site Scripting Vulnerabilities
Icinga is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:icinga:icinga";...
Quick Poll Local File Include and Arbitrary File Deletion Vulnerabilities
Quick Poll is prone to a local file-include vulnerability and an arbitrary-file- deletion vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...
Support Incident Tracker (SiT!) <= 3.62 Multiple XSS Vulnerabilities - Active Check
Support Incident Tracker SiT! is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...
PhotoPost PHP <= 4.8c Multiple XSS Vulnerabilities - Active Check
PhotoPost PHP is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Course MS <= 2.1 Multiple Vulnerabilities - Active Check
Course Registration Management System is prone to multiple input validation vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
F-Secure Internet Gatekeeper Default Administrator Credentials
The remote F-Secure Internet Gatekeeper install uses a default set of credentials 'admin' / 'admin' to control access to its Web Console. With this information, an attacker can gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...