MoinMoin Detection

The remote host is running MoinMoin, a wiki written in Python. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid44382; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"MoinMoin Detection";...

Adobe ColdFusion Detection

Adobe ColdFusion formerly Macromedia ColdFusion, a rapid application development platform, is running on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42339; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate",...

CGI Generic Tests Load Estimation (all tests)

This script computes the maximum number of requests that would be done by the generic web tests, depending on miscellaneous options. It does not perform any test by itself. The results can be used to estimate the duration of these tests, or the complexity of additional manual tests. Note that the...

Snitz Forums 2000 Detection

Snitz Forums 2000, a free discussion forum application written in ASP, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid40469; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

Open Virtual Desktop Detection

The remote host is running Ulteo Open Virtual Desktop, an open source application delivery solution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid38762; scriptversion"1.12";...

Linksys WVC54GCA Wireless-G '/img/main.cgi' Information Disclosure

The remote host is a Linksys WVC54GCA network camera. The version of the firmware of the remote camera contains a flaw that allows authenticated users to download the .htpasswd file from the remote host, which gives them the ability to crack the passwords of other users, including the password of...

Sun Java System Identity Manager Detection

Sun Java System Identity Manager, an enterprise tool for identity management, is installed on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35104; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

Simple PHP Blog Detection

The remote host is running Simple PHP Blog, an open source blog application that uses flat text files. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34109; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

AWStats Totals awstatstotals.php multisort() Function sort Parameter Arbitrary PHP Code Execution

The remote web server is running a version of awstatstotals.php which does not properly sanitize its 'sort' argument. An attacker can run arbitrary commands on the remote host within the context of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Sun Java ASP Server Default Admin Password

The remote host is running Sun Java ASP server. It is possible to access the remote server with default admin credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid33437; scriptversion"1.13";...

F5 BIG-IP Web Management Interface Version

An F5 BIG-IP web management interface is running on this port, and Nessus has determined its software version. Note. HTTP credentials are required to retrieve version information. TRUSTED...

TikiWiki tiki-graph_formula.php f Parameter Arbitrary Command Execution

The remote host is running TikiWiki, an open source wiki application written in PHP. The version of TikiWiki on the remote host fails to sanitize input to the 'f' parameter of the 'tiki-graphformula.php' script before using it as a function call. Regardless of PHP's 'registerglobals' setting, an...

Joomla! CMS com_search Component 'searchword' Parameter RCE

The version of Joomla! running on the remote host is affected by a remote code execution vulnerability within the comsearch/views/search/tmpl/defaultresults.php script due to improper sanitization of user-supplied input to the 'searchword' parameter before passing it to the eval function. An...

Packeteer Web Management Interface Version Detection

Nessus was able to determine the software version of the Packeteer web management interface running on the remote host. nnposter GPL Changes by Tenable: - Revised plugin title 3/30/2009 include"compat.inc"; if description scriptid25569; scriptversion "1.9"; scriptnameenglish:"Packeteer Web...

Packeteer Web Management Interface Detection

The remote web server is a Packeteer web management interface. nnposter GPL include"compat.inc"; if description scriptid25568; scriptversion "1.10"; name"english"="Packeteer Web Management Interface Detection"; scriptnameenglish:name"english"; scriptsetattributeattribute:"synopsis", value: "The...

Packeteer Web Management Interface Authentication

Nessus was able to log onto the remote Packeteer web management interface with the given credentials and has stored the authentication cookie in the KB for use with other plugins. %NASLMINLEVEL 70300 nnposter GPL Changes by Tenable: - Revised plugin title 3/30/2009 if!definedfunc"MD5" exit0;...

Symantec Web Security (SWS) Multiple Vulnerabilities

According to its banner, the version of Symantec Web Security on the remote host is vulnerable to denial of service and cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid25446;...

ELOG Web LogBook global Denial of Service

The remote web server is identified as ELOG Web Logbook, an open source blogging software. The version of ELOG Web Logbook installed on the remote host is vulnerable to a denial of service attack by requesting '/global' or any logbook with 'global' in its name. When a request like this is receive...

WebAdmin < 3.2.6 MDaemon Account Hijacking

The remote host is running WebAdmin, a web-based remote administration tool for Alt-N MDaemon. According to its banner, the installed version of WebAdmin enables a domain administrator within the default domain to hijack the 'MDaemon' account used by MDaemon when processing remote server and...

IPCheck Server Monitor Traversal Arbitrary File Access

The remote host is running IPCheck Server Monitor, a network resource monitoring tool for Windows. The installed version of IPCheck Server Monitor fails to filter directory traversal sequences from requests that pass through web server interface. An attacker can exploit this issue to read arbitra...