Lucene search
+L

563 matches found

OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.36 views

Bugzilla remote arbitrary command execution

The remote Bugzilla bug tracking system, according to its version number, is vulnerable to arbitrary commands execution flaws due to a lack of sanitization of user-supplied data in processbug.cgi OpenVAS Vulnerability Test $Id: bugzillaremoteexec.nasl 8023 2017-12-07 08:36:26Z teissa $ Descriptio...

7.5CVSS0.6AI score0.03132EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.37 views

Apache HTTP Server /server-info Accessible (HTTP)

Requesting the URI /server-info provides a comprehensive overview of the server configuration. SPDX-FileCopyrightText: 2005 StrongHoldNet SPDX-FileCopyrightText: New NASL / detection code since 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

7AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.49 views

vpasswd.cgi

The 'vpasswd.cgi' CGI is installed. Some versions do not properly check for special characters and allow a cracker to execute any command on your system. Warning : OpenVAS solely relied on the presence of this CGI, it did not determine if you specific version is vulnerable to that problem OpenVAS...

0.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.17 views

Synchrologic User account information disclosure

The remote host seems to be running Synchrologic Email Accelerator Synchrologic is a product which allows remote PDA users to synch with email, calendar, etc. If this server is on an Internet segment as opposed to internal, you may wish to tighten the access to the aggregate.asp page. The server...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.23 views

BasiliX SQL Injection Vulnerability

The remote web server contains PHP scripts that are prone to SQL injection attacks. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions are potentially vulnerable to SQL injection attacks depending on the version of PHP installed...

6.4CVSS7.8AI score0.01153EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.18 views

Horde Information Disclosure Vulnerability (Nov 2005) - Active Check

Horde is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2004 Sverre H. Huseby Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.29 views

Roxen counter module

The Roxen Challenger webserver is running and the counter module is installed. Requesting large counter GIFs eats up CPU-time on the server. If the server does not support threads this will prevent the server from serving other clients. SPDX-FileCopyrightText: 2000 Hendrik Scholz Some text...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.56 views

ServletExec 4.1 ISAPI File Reading

By invoking the JSPServlet directly it is possible to read the contents of files within the webroot that would not normally be accessible global.asa, for example. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

5CVSS6.5AI score0.08297EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.62 views

Brio Unix Directory Traversal

The Brio web application interface has a directory traversal in the component SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only v. 1.00 last upda...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.10 views

SQL Disclosure in Invision Power Board

There is a vulnerability in the current version of Invision Power Board that allows an attacker to reveal the SQL queries used by the product, and any page that was built by the administrator using the IPB SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a...

7.7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.21 views

InterScan VirusWall Remote Configuration Vulnerability

The management interface used with the Interscan VirusWall uses several cgi programs that may allow a malicious user to remotely change the configuration of the server without any authorization using maliciously constructed querystrings. SPDX-FileCopyrightText: 2001 INTRANODE Some text descriptio...

10CVSS6.5AI score0.10723EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.23 views

BookReview beta 1.0 Multiple Vulnerabilities - Active Check

BookReview is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.8AI score0.0513EPSS
SaveExploits11References13
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.14 views

Horde Chora < 1.2.2 RCE Vulnerability - Active Check

Horde Chora is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

8.2AI score
SaveExploits0References4
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.222 views

Basit CMS 1.0 XSS and SQLi Vulnerabilities - Active Check

Basit CMS is prone to a cross-site scripting XSS and a SQL injection SQLi vulnerability SPDX-FileCopyrightText: 2003 k-otik.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

6.5AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.20 views

BasiliX Arbitrary File Disclosure Vulnerability

The remote web server contains a PHP script that is prone to information disclosure. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions allow retrieval of arbitrary files that are accessible to the web server user when sending a message since they...

3.6CVSS6.8AI score0.00333EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.20 views

/cgi-bin directory browsable

The /cgi-bin directory is browsable. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2005 Hendrik Scholz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.14 views

DefaultNav checker

This plugin checks for DefaultNav vulnerabilities on the remote web server See the references for more information. SPDX-FileCopyrightText: 2005 Net-Square Solutions Pvt Ltd. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.6AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.25 views

ReadDesign checker

This plugin checks for ReadDesign vulns on the remote web server. SPDX-FileCopyrightText: 2005 Net-Square Solutions Pvt Ltd. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

7.5AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.44 views

Nuked-klan <= 1.3b Multiple Vulnerabilities - Active Check

Nuked-klan is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 k-otik.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.12 views

Winmail Mail Server Information Disclosure

Three scripts that come with the installed Winmail Server chgpwd.php, domain.php and user.php allow a remote attacker to disclose sensitive information about the remote host. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are...

7.1AI score
SaveExploits0References3
Rows per page
Query Builder