PHP Address Book Multiple Cross Site Scripting Vulnerabilities

This host is running PHP Address Book and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodphpaddressbookmultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ PHP Address Book Multiple Cross Site Scripting Vulnerabilities Authors: Sooraj KS Copyright:...

Citrix Provisioning Services SoapServer RCE (CTX133039)

The version of Citrix Provisioning Services running on the remote Windows host is affected by a remote code execution vulnerability in the SoapServer service due to an overflow condition caused by improper validation of user-supplied input when parsing date and time strings. An unauthenticated,...

Joomla! JA T3 Framework Component Directory Traversal Vulnerability

This host is running Joomla! JA T3 Framework component and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodjoomlajat3frameworkcomdirtravvuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Joomla! JA T3 Framework Component Directory Traversal Vulnerability Authors:...

FreePBX Multiple Cross Site Scripting and Remote Command Execution Vulnerabilities

This host is running FreePBX and is prone to multiple cross site scripting and remote command execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfreepbxmultxssnrcevuln.nasl 5977 2017-04-19 09:02:22Z teissa $ FreePBX Multiple Cross Site Scripting and Remote Command Execution...

phux Download Manager 'file' Parameter SQL Injection Vulnerability

phux Download Manager is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Theme Tuner Plugin 'tt-abspath' Parameter Remote File Inclusion Vulnerability

WordPress is prone to a remote file inclusion vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"...

OfficeSIP Server 3.1 - Denial of Service

OfficeSIP Server 3.1 - Denial of Service Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461...

phpLDAPadmin < 1.2.3 XSS Vulnerability - Active Check

phpLDAPadmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OfficeSIP Server 3.1 - Denial of Service

Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461 http://secpod.org/advisories/SecPodExploitOfficeSIPServerDOSVuln.txt...

OfficeSIP Server 3.1 Denial Of Service Vulnerability

Exploit for windows platform in category dos / poc Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461...

phpLDAPadmin 'base' Parameter Cross Site Scripting Vulnerability

This host is running phpLDAPadmin and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbphpldapadminbaseparamxssvuln.nasl 5792 2017-03-30 13:18:14Z cfi $ phpLDAPadmin 'base' Parameter Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2012...

NeoAxis Web Player Zip File Directory Traversal Vulnerability

NeoAxis Web Player is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress 'setup-config.php' Multiple Vulnerabilities

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...

SolGens E-Commerce 'cid' And 'pid' Parameters SQLi Vulnerability

SolGens E-Commerce is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CA SiteMinder 'target' Parameter Cross-Site Scripting Vulnerability

CA SiteMinder is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ExtCalendar2 SQL Injection and Authentication Bypass Vulnerabilities

This host is ExtCalendar2 and is prone to sql injection and authentication bypass vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

phpBB MyPage Plugin 'id' Parameter SQL Injection Vulnerability

This host is running phpBB MyPage plugin and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodphpbbmypagepluginsqlinjvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ phpBB MyPage Plugin 'id' Parameter SQL Injection Vulnerability Authors: Rachana Shetty Copyright: Copyrig...

phpBB MyPage Plugin <= 0.2.3 SQLi Vulnerability - Active Check

phpBB MyPage plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpbb:phpbb"...

Expinion.Net Member Management System 'REF_URL' Parameter Cross-Site Scripting Vulnerability

The host is running Member Management System and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmembermanagementsystemxssvuln.nasl 5750 2017-03-28 14:10:17Z cfi $ Expinion.Net Member Management System 'REFURL' Parameter Cross-Site Scripting Vulnerability Authors...

GoAhead Webserver 2.5 Cross Site Scripting

Title : GoAhead WebServer Multiple Cross Site Scripting Vulnerabilities Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.goahead.com/products/webserver/default.aspx Advisory : http://secpod.org/blog/?p=421 http://secunia.com/advisories/46896...