Microsoft .NET Handlers Enumeration

It is possible to obtain the list of handlers the remote ASP.NET web server supports. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid24242; scriptversion "1.10"; scriptcvsdate"Date: 2018/11/15 20:50:25"; name"english" = "Microsoft .NET Handlers Enumeration";...

BrewBlogger 1.3.1 - printLog.php SQL Injection

BrewBlogger 1.3.1 - printLog.php SQL Injection !/usr/bin/perl Target: BewBlogger 1.3.1 http://brewblogger.zkdigital.com Vulnerability: SQL Injection Description: BrewBlogger does not properly sanitize the 'id=' parameter passed to printLog.php. Since each user entry contains an auto-incrementing ...

Code injection

Mail Management Agent MAILMA aka Mail Management Server in Rockliffe MailSite 7.0.3.1 and earlier generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames via user requests to TCP port 106...

Oracle XSQL Sample Application Vulnerability

One of the sample applications that comes with the Oracle XSQL Servlet allows an attacker to make arbitrary queries to the Oracle database under an unprivileged account. Whilst not allowing an attacker to delete or modify database contents, this flaw can be used to enumerate database users and vi...

Apache UserDir Sensitive Information Disclosure

An information leak occurs on Apache based web servers whenever the UserDir module is enabled. The vulnerability allows an external attacker to enumerate existing accounts by requesting access to their home directory and monitoring the response. OpenVAS Vulnerability Test $Id: apacheusername.nasl...

CVE-2005-1201

Multiple directory traversal vulnerabilities in AZ Bulletin board AZbb before 1.0.08 allow 1 remote authenticated users with administrative privileges to delete arbitrary files via a .. dot dot in the URL to adminavatar.php or adminattachment.php or 2 remote attackers to enumerate files via a...

SMB Use Domain SID to Enumerate Users

Using the domain security identifier SID, Nessus was able to enumerate the domain users on the remote Windows system. C Tenable Network Security, Inc. @PREFERENCES@ include"compat.inc"; if description scriptid10399; scriptversion"1.82"; scriptcvsdate"Date: 2020/01/07"; scriptnameenglish:"SMB Use...

CVE-1999-0656

The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names...