PHP-Nuke security vulnerability (bb_smilies.php)

The remote host seems to be vulnerable to a security problem in PHP-Nuke bbsmilies.php. The vulnerability is caused by inadequate processing of queries by PHP-Nuke SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

MondoSoft MondoSearch < 4.4.5156 'msmmask.exe' Source Disclosure Vulnerability - Active Check

MondoSoft MondoSearch is prone to a source code disclosure vulnerability. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

/doc directory browsable

The /doc directory is browsable. /doc shows the content of the /usr/doc directory and therefore it shows which programs and - important! - the version of the installed programs. SPDX-FileCopyrightText: 2000 Hendrik Scholz Some text descriptions might be excerpted from a referenced sources, and ar...

Anti-Scanner Defenses (HTTP)

It seems that the remote web server rejects HTTP requests from the Scanner. It is probably protected by a reverse proxy, WAF or IDS/IPS. SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New / improved detection code since 2018 Greenbone AG Some text descriptions might be excerpte...

BasiliX Arbitrary File Disclosure Vulnerability

The remote web server contains a PHP script that is prone to information disclosure. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions allow retrieval of arbitrary files that are accessible to the web server user when sending a message since they...

WebHints remote command execution flaw

The remote version of the WebHints scripts is vulnerable to remote command execution flaw through the script SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

'printenv' CGI Information Disclosure Vulnerability

The SPDX-FileCopyrightText: 2000 Hendrik Scholz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10188";...

TinyWeb < 1.93 Multiple Vulnerabilities

TinyWeb is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 Matt North Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11894...

CWmail.exe Information Disclosure / Privilege Escalation Vulnerability

The CWMail.exe exists on this webserver. Some versions of this file are vulnerable to remote exploit. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

ServletExec 4.1 ISAPI File Reading

By invoking the JSPServlet directly it is possible to read the contents of files within the webroot that would not normally be accessible global.asa, for example. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Horde Information Disclosure Vulnerability (Nov 2005) - Active Check

Horde is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2004 Sverre H. Huseby Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Goollery < 0.04b Multiple XSS Vulnerabilities - Active Check

Goollery is prone to multiple cross-site-scripting XSS vulnerabilities eg. through the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SQL Disclosure in Invision Power Board

There is a vulnerability in the current version of Invision Power Board that allows an attacker to reveal the SQL queries used by the product, and any page that was built by the administrator using the IPB SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a...

Oracle 9i Application Server PORTAL_DEMO ORG_CHART Accessible - Active Check

In installations of Oracle 9i Application Server AS, it is possible to access a demo PORTALDEMO.ORGCHART via modplsql. Access to these pages should be restricted, because it may be possible to abuse this demo for SQL injection attacks. SPDX-FileCopyrightText: 2003 Frank Berger Some text...

cgi.rb

The SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15710";...

Snapstream PVS web directory traversal

It is possible to read arbitrary files on the remote Snapstream PVS server by prepending ../../ in front on the file name. It may also be possible to read ../ssd.ini which contains many information on the system base directory, usernames & passwords. SPDX-FileCopyrightText: 2002 Michel Arboi Some...

Horde Chora < 1.2.2 RCE Vulnerability - Active Check

Horde Chora is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

e107 Detection

The remote host is running e107, a content management system written in PHP and with a MySQL back-end. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20129; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

CubeCart < 3.0.4 Multiple Script XSS

The remote version of CubeCart contains several cross-site scripting vulnerabilities due to its failure to properly sanitize user-supplied input of certain variables to the 'index.php' and 'cart.php' scripts. %NASLMINLEVEL 70300 Josh Zlatin-Amishav This script is released under the GNU GPLv2...

phpGroupWare < 0.9.16 Addressbook Unspecified Vulnerability

The remote host seems to be running PhpGroupWare, a multi-user groupware suite written in PHP. This version is prone to an unspecified flaw related to its addressbook. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...