Betsy <= 4.0 LFI Vulnerability - Active Check

Betsy is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HP OpenView Performance Insight Server 'doPost()' Remote Arbitrary Code Execution Vulnerability

HP OpenView Performance Insight Server is prone to a remote code-execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MultiCMS 'lng' Parameter Local File Include Vulnerability

MultiCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. This may allow...

MultiCMS 'lng' Parameter Local File Include Vulnerability

MultiCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PHP Coupon Script <= 6.0 SQLi Vulnerability - Active Check

PHP Coupon Script is prone to an SQL injection SQLi vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sahana Agasti Multiple Input Validation Vulnerabilities

Sahana Agasti is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Ax Developer CMS <= 0.1.1 LFI Vulnerability - Active Check

Ax Developer CMS is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

DD-WRT '/Info.live.htm' Multiple Information Disclosure Vulnerabilities

DD-WRT is prone to multiple remote information-disclosure issues because it fails to restrict access to sensitive information. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mitel Audio and Web Conferencing (AWC) Remote Arbitrary Shell Command Injection Vulnerability

Mitel Audio and Web Conferencing AWC is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running the application. OpenVAS...

ECAVA IntegraXor <= 3.6.4000.0 Directory Traversal Vulnerability - Active Check

ECAVA IntegraXor is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MantisBT <=1.2.3 (db_type) Local File Inclusion Vulnerability

Mantis is prone to a local file-include vulnerability because it fails to properly sanitize user supplied input. Input passed through the 'dbtype' parameter GET & POST to upgradeunattended.php script is not properly verified before being used to include files. Mantis is also prone to a cross-site...

Dell Integrated Remote Access Controller (iDRAC) Web Interface Detection

The web interface for Dell Integrated Remote Access Controller iDRAC, formerly known as Dell Remote Access Controller DRAC, was detected on the remote host. C Tenable, Inc. Thanks to Jason Haar for his help! include'compat.inc'; if description scriptid51185; scriptversion"1.32";...

FreeNAS Remote Shell Command Execution Vulnerability

FreeNAS is prone to a shell-command-execution vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit the remote shell-command-execution issue to execute arbitrary shell commands in the context of the webserver process. FreeNAS versions prior ...

GDL 'id' Parameter SQL Injection Vulnerability

GDL Ganesha Digital Library is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilitie...

HP Systems Insight Manager Detection

HP Systems Insight Manager, a web-based application for managing remote systems, is installed on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid50541; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/03/22";...

Web Common Credentials

Nessus was able to read protected web pages by using common login and password combinations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid50504; scriptversion"1.14";...

Bugzilla Response Splitting and Security Bypass Vulnerabilities

Bugzilla is prone to a response-splitting vulnerability and a security- bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

FreePBX System Recordings Menu Arbitrary File Upload Vulnerability

FreePBX is prone to an arbitrary file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker can leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the webserver. FreePBX...

FrontAccounting Multiple Cross Site Scripting Vulnerabilities

FrontAccounting is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openEngine <= 2.0 100226 Multiple Vulnerabilities

openEngine is prone to a local file-include vulnerability and a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...