2026 matches found
RunCMS highlight.php Information Disclosure
Binary data 2723.prm...
PHP-Fusion < 5.0.2 setuser.php HTML Injection Vulnerability
Binary data 2726.prm...
punBB < 1.2.5 Multiple SQL Injection and Authentication Bypass Vulnerabilities
Binary data 2715.prm...
paFileDB < 3.2 XSS and SQL Injection Vulnerabilities
Binary data 2686.prm...
phpBB < 2.0.14 Cookie Authentication Bypass and SQL Injection Vulnerabilities
Binary data 2674.prm...
OrangeHRM < 2.4.2 Multiple Vulnerabilities
Binary data 5005.prm...
IBM Tivoli Storage Manager < 5.2.5.4/5.3.6.6/5.4.2.7/5.5.2 Multiple Vulnerabilities
Binary data 5016.prm...
MercuryBoard < 1.1.6 SQL Injection
Binary data 4510.prm...
ASPrunner 2.4 Multiple Vulnerabilities
The remote host is running ASPrunner prior to version 2.5. There are multiple flaws in this version of ASPrunner which would enable a remote attacker to read and/or modify potentially confidential data. An attacker, exploiting this flaw, would need access to the web server via the network...
SUSE-SA:2004:024: kernel
The remote host is missing the patch for the advisory SUSE-SA:2004:024 kernel. This kernel is vulnerable to a race condition in the 64-bit file offset handling code. The file offset pointer fpos is changed during reading, writing, and seeking through a file to point to the current position in a...
APSIS Pound Load Balancer Format String Overflow
The remote server is vulnerable to a remote format string bug which can allow remote attackers to gain access to confidential data. Pound versions less than 1.6 are vulnerable to this issue. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12007; scriptversion "1.14";...
MERCUR Mailserver SMTP / IMAP / POP3 Servers Remote Overflows
The remote Atrium MERCUR SMTP server mail server seems to be vulnerable to a remote buffer overflow. Successful exploitation of this vulnerability would give a remote attacker administrative access to the mail server and access to potentially confidential data. The IMAP and POP3 servers are...
PDGSoft Shopping Cart Multiple Vulnerabilities
The executables 'redirect.exe' and/or 'changepw.exe' exist on this web server. Some versions of these files are vulnerable to remote exploit. An attacker can use this hole to gain access to confidential data or escalate their privileges on the web server. As Nessus solely relied on the existence ...
Behold! Software counter.exe Malformed HTTP Request Counter Log DoS
The CGI 'counter.exe' exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker may make use of this file to gain access to confidential data or escalate their privileges on the web server. %NASLMINLEVEL 70300 This script was written by John...
ION ion-p.exe page Parameter Traversal Arbitrary File Retrieval
The ion-p.exe exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker, exploiting this vulnerability, may be able to gain access to confidential data and/or escalate their privileges on the web server. %NASLMINLEVEL 70300 This script was written by John...
MS01-035: Microsoft IIS FrontPage fp30reg.dll Remote Overflow (uncredentialed check)
Microsoft IIS, running Frontpage extensions, is vulnerable to a remote buffer overflow attack. An attacker, exploiting this bug, may gain access to confidential data, critical business processes, and elevated privileges on the attached network. %NASLMINLEVEL 70300 This script was written by John...
DC Scripts DCShop Beta 1.0 02 - File Disclosure (2)
DC Scripts DCShop Beta 1.0 02 - File Disclosure 2 source: https://www.securityfocus.com/bid/2889/info DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential ord...
DC Scripts DCShop Beta 1.0 02 - File Disclosure (1)
DC Scripts DCShop Beta 1.0 02 - File Disclosure 1 source: https://www.securityfocus.com/bid/2889/info DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential ord...
DC Scripts DCShop Beta 1.0 02 - File Disclosure (1)
source: https://www.securityfocus.com/bid/2889/info DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data, including credit card and other private...
Drummond Miles A1Stats 1.0 - 'a1disp3.cgi' Traversal Arbitrary File Read
source: https://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script. An attacker can compose a long path...