PHP-Nuke 8.x <= "chng_uid" Blind SQL Injection Vulnerability

PHP-Nuke 8.x = Blind SQL Injection Vulnerability 1. OVERVIEW The administration backend of PHP-Nuke 8.x is vulnerable to Blind SQL Injection. 2. BACKGROUND PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and...

Symantec LiveUpdate Administrator crossite request forgery

Crossite request forgery in administration web interface...

PHP-Nuke 8.x Blind SQL Injection

PHP-Nuke 8.x /admin.php POST...

[SECURITY] Fedora 13 Update: mailman-2.1.12-17.fc13

Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from...

Citrix Licensing Administration Console Security Bypass And Denial Of Service Vulnerabilities

This host is installed with Citrix Licensing Administration Console and is prone to security bypass and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbcitrixlicensingadminconsolemultvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Citrix Licensing Administration Console Security...

IBM DB2 Universal Database receiveDASMessage Buffer Overflow (CVE-2011-0594)

IBM DB2 Database is a relational database management system that includes the DB2 Administration Server DAS service. The DB2 Administration Server DAS assists the Control Center and Configuration Assistant in enabling remote administration of DB2 database instances, providing the facility for job...

Citrix License Server Version Detection

This script finds the installed Citrix License Server version. The script logs in via smb, searches for Citrix in the registry and gets the version from SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Citrix Licensing Administration Console Security Bypass And Denial Of Service Vulnerabilities

Citrix Licensing Administration Console is prone to security bypass and denial of service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

[SECURITY] Fedora 15 Update: phpMyAdmin-3.3.9.2-1.fc15

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges, export data into various formats and ...

Veritas Cluster Management Console Detection

The remote host is running Veritas Cluster Management Console. Since overloading this web service may force a cluster switch, web tests will be disabled on this port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52504; scriptversion"1.6"; scriptcvsdate"Date:...

New Trojan Targets Mac OS X Users

Researchers have found a new piece of malware that’s designed to attack the Mac OS X platform, an occurrence that’s rare enough still that each new discovery is noted separately. The new Trojan is known as the Black Hole RAT remote administration tool and is capable of giving a remote attacker...

Fedora Update for phpMyAdmin FEDORA-2011-1408

Check for the Version of phpMyAdmin OpenVAS Vulnerability Test Fedora Update for phpMyAdmin FEDORA-2011-1408 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2011-1101

Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6, formerly License Management Console, allow remote attackers to 1 access unauthorized "license administration functionality" or 2 cause a denial of service via unknown vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6, formerly License Management Console, allow remote attackers to 1 access unauthorized "license administration functionality" or 2 cause a denial of service via unknown vectors...

CVE-2011-1101

CVE-2011-1101 concerns Citrix Licensing Administration Console 11.6 with multiple vulnerabilities in a third‑party component, enabling remote attackers to access unauthorized license administration functionality or cause a denial of service via unknown vectors (NVD entry, CVSSv2 base 6.8). OpenVA...

[SECURITY] Fedora 14 Update: phpMyAdmin-3.3.9.2-1.fc14

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges, export data into various formats and ...

[SECURITY] Fedora 13 Update: phpMyAdmin-3.3.9.2-1.fc13

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges, export data into various formats and ...

CVE-2011-1101: Undefined Security Weakness

Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6, formerly License Management Console, allow remote attackers to 1 access unauthorized "license administration functionality" or 2 cause a denial of service via unknown vectors...

PT-2011-2866

Name of the Vulnerable Software and Affected Versions Citrix Licensing Administration Console version 11.6 Description The issue concerns multiple unspecified vulnerabilities in a third-party component. These vulnerabilities allow remote attackers to access unauthorized license administration...

How easy it is to hack AMC's sites !

An 'ethical' hacker demonstrates how one can break into the civic corporation's e-governance site and I P Gautam's official domain to access confidential info. The state government's websites are under threat of being hacked. A BCA student, who calls himself an 'ethical' hacker, demonstrated how ...