ELOG < 2.6.2-7 DoS Vulnerability

ELOG is prone to a denial of service DoS vulnerability by requesting SPDX-FileCopyrightText: 2008 Justin Seitz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Sybase ASA Ping

The remote Sybase SQL Anywhere / Adaptive Server Anywhere database is configured to listen for client connection broadcasts, which allows an attacker to see the name and port that the Sybase SQL Anywhere / Adaptive Server Anywhere server is running on. SPDX-FileCopyrightText: 2008 David Lodge Som...

CVSTrac < 2.0.1 DoS Vulnerability

CVSTrac is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cvstrac:cvstrac";...

CVE-2008-4727

Cross-site scripting XSS vulnerability in the contact update page ss/bwgkoemr.PUpdateEmrgContacts in SunGard Banner Student 7.3 allows remote attackers to inject arbitrary web script or HTML via the addr1 parameter. NOTE: this might be resultant from a CSRF vulnerability, but there are insufficie...

CVE-2008-4727

CVE-2008-4727 describes a Cross-site Scripting (XSS) vulnerability in SunGard Banner Student 7.3, specifically on the contact update page (ss/bwgkoemr.P_UpdateEmrgContacts) where the addr1 parameter can inject arbitrary script/HTML. The note indicates this may be related to CSRF, but the sources ...

CVE-2008-4727: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the contact update page ss/bwgkoemr.PUpdateEmrgContacts in SunGard Banner Student 7.3 allows remote attackers to inject arbitrary web script or HTML via the addr1 parameter. NOTE: this might be resultant from a CSRF vulnerability, but there are insufficie...

PHP Detection (HTTP)

HTTP based detection of PHP. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.800109";...

abe-sql.txt

|| | | Adult Banner Exchange Website targetid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : IQ-SecuritY www.IQ-tY.com | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Apple iTunes < 8.0 Integer Buffer Overflow (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 8.0. It is, therefore, affected by an integer buffer overflow vulnerability in an included third party driver. A local user can exploit this to gain system privileges. C Tenable Network Security, Inc. include"compat.inc"; if...

FileMaker Service Detection (TCP)

TCP based detection of the FileMaker database server. SPDX-FileCopyrightText: 2008 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

ike-scan (NASL wrapper)

This VT is deprecated. SPDX-FileCopyrightText: 2008 Tim Brown and Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Python <= 2.5.2 Multiple Vulnerabilities - Windows

Python is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescription...

Sql injection

SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3749

SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3749

CVE-2008-3749 describes an SQL injection vulnerability in tr.php of the YourFreeWorld Banner Management Script. The flaw allows remote attackers to execute arbitrary SQL commands by supplying manipulated input in the id parameter, leading to potential partial to complete data exposure or modifica...

CVE-2008-3749: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Banner Management Script (tr.php id) Remote SQL Injection Vulnerability

No description provided by source. || | | Banner Management Script tr.php id Remote SQL Injection Vulnerability | | |---------------------S.W.A.T.----------------------| | | Author: S.W.A.T. | | Home : www.svvat.ir | | email: svvateamatYahooDoTcom | | | | | | | script :...

bms-sql.txt

|| | | Banner Management Script tr.php id Remote SQL Injection Vulnerability | | |---------------------S.W.A.T.----------------------| | | Author: S.W.A.T. | | Home : www.svvat.ir | | email: svvateamatYahooDoTcom | | | | | | | script : http://www.yourfreeworld.com/script/bannermanagementscript.ph...

Generic Backdoor Detection (banner check)

The remote service tries to mimic a known service. This is probably a backdoor. In this case, your system may be compromised, and an attacker can control it remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid33951; scriptversion "$Revision: 1.10 $";...

Banner Management Script (tr.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Banner Management Script tr.php id Remote SQL Injection Vulnerability ======================================================================= || | | Banner Management...