Sql injection

SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid parameter...

CVE-2009-5003

SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid parameter...

CVE-2009-5003

SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid parameter...

CVE-2009-5003

CVE-2009-5003 is an SQL injection in the e-soft24 Banner Exchange Script 1.0. The vulnerability is in click.php, exploitable via the targetid parameter to allow remote execution of arbitrary SQL commands. Multiple sources (NVD, CVE lists, PRION) corroborate this description. The reports do not pr...

CVE-2009-5003: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid parameter...

LightNEasy 'LightNEasy.php' SQL Injection Vulnerability

LightNEasy is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlyi...

Pecio CMS Detection (HTTP)

HTTP based detection of Pecio CMS. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.801443";...

Users Still Making Life Easy for Scareware Crews

Scareware and rogue AV programs have enjoyed a very good run in the last few years, making millions of dollars for their creators and generally making life miserable for victims. And while there’s been some innovation recently in the mechanisms attackers use to keep the programs resident on...

PHPFinance Detection

This host is running PHPFinance, a financial management program. OpenVAS Vulnerability Test $Id: gbPHPFinancedetect.nasl 5735 2017-03-27 12:27:20Z cfi $ PHPFinance Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free software; you can...

Serv-U Denial of Service and Security Bypass Vulnerabilities

Serv-U is prone to denial-of-service and security-bypass vulnerabilities. Exploiting these issues can allow attackers to create directories without having sufficient permissions, or crash the affected application, resulting in denial-of-service conditions. Versions prior to Serv-U 10.2.0.0 are...

Adult Banner Exchange Website Remote Insecure Cookie Handling

Exploit for php platform in category web applications ============================================================= Adult Banner Exchange Website Remote Insecure Cookie Handling ============================================================= Author : KnocKout Thankz.: DaiMon Contact: email protecte...

CjwSoft Asp Banner Multiple Vulnerability

Exploit for asp platform in category web applications ========================================= CjwSoft Asp Banner Multiple Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

Nmap NSE: Banner Grabber

This script attempts to connect to the target port and returns the banner of the remote service. This is a wrapper on the Nmap Security Scanner's http://nmap.org banner.nse OpenVAS Vulnerability Test $Id: gbnmapbannergrabber.nasl 8233 2017-12-22 09:37:31Z cfischer $ Wrapper for Nmap Banner Grabbe...

ZeusCart Version Detection

The script detects the version of ZeusCart on remote host and sets the KB. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: Banner Grabber

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MongoDB Detection (MongoDB Wire Protocol)

MongoDB Wire Protocol based detection of MongoDB. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Event Horizon Detection (HTTP)

HTTP based detection of Event Horizon. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.902081";...

osCSS Detection (HTTP)

HTTP based detection of osCSS. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.901135";...

Apache HTTP Server Version

The remote host is running the Apache HTTP Server, an open source web server. It was possible to read the version number from the banner. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid48204; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate",...

IBM AIX 5l - FTPd Remote DES Hash

IBM AIX 5l - FTPd Remote DES Hash / IBM AIX 5l FTPd Remote DES Hash Exploit -- Advanced 'Datacenter' Edition : Should work on IBM AIX 5.1,5.2,5.3! probably on 4.X too bug found & exploited by Kingcope Version 2.0 - July 2010...