liberoit-xss.txt

The Italian ISP Libero.it not check the HTTP POST Parameter "pQuery" on search query and displays the content of this variable without modification within the html form area. Security problems on Libero's 155.it allows attackers to conduct XSS attacks for the following URL:...

Unfixed XSS vulnerability at www.canadianisp.com

Security researcher Fugitif, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.canadianisp.com, which at the time of submission ranked 435717 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is...

Solaris 5.6 (sparc) : 109662-03

Solaris ISP Server 2.0: /usr/lib/inet/in.ftpd patch. Date this patch was last updated by Sun : Jun/19/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. ...

Solaris 5.7 (sparc) : 109662-03

Solaris ISP Server 2.0: /usr/lib/inet/in.ftpd patch. Date this patch was last updated by Sun : Jun/19/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. ...

NetSniper network pioneer works-vulnerability warning-the black bar safety net

NetSniper network tip of the soldiers is in Shanghai on a large lake network system Co., Ltd. developed the network access detection and a controller. It can automatically detect the network without permission the erection of a proxy server is system or an illegal router, and through the illegal...

[Kil13r-SA-20060628] Hanaro Search Cross-Site Scripting Vulnerability

Title: Kil13r-SA-20060628 Hanaro Search Cross-Site Scripting Vulnerability Author: Kil13r - http://www.kil13r.info/ Local / Remote: Remote Timeline: 2006/06/22 - Discovery 2006/06/28 - Release Affected version: Not affected version: Description: Hanaro is ISP site, but that has vulnerability. It...

Sql injection

SQL injection vulnerability in adminlogin.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass parameter...

CVE-2006-1586

CVE-2006-1586 concerns a SQL injection in the admin_login.asp script of ISP of Egypt SiteMan, exploitable via the pass parameter to allow remote execution of arbitrary SQL commands. The vulnerability affects the login-related functionality and arises from improper handling of input in the pass pa...

ISP Site Man - admin_login.asp SQL Injection

ISP Site Man - adminlogin.asp SQL Injection source: https://www.securityfocus.com/bid/17347/info Site Man is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

ISP Site Man - 'admin_login.asp' SQL Injection

source: https://www.securityfocus.com/bid/17347/info Site Man is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Mail Transport System Professional open mail relay

Mail relayed without IP address verification if smart host ISP relay is configured...

Mail Transport System Professional--Open Relay Hole

What: Mail Transport System Professional is a RFC compliant mail server for Windows. Who: http://www.mtsprofessional.com/ Problem: Open relay hole when forwarding all outgoing mail through an ISP. When configured to forward all outgoing mail through an ISP MTS Pro will accept and forward all...

Extent RBS ISP

The 'Extent RBS ISP 2.5' software is installed. This software has a well known security flaw that lets anyone read arbitrary files with the privileges of the http daemon root or nobody. OpenVAS Vulnerability Test $Id: rbs.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Extent RBS ISP Authors...

Extent RBS ISP

The SPDX-FileCopyrightText: 2000 Zorgon Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10521"; scriptversion"2025-04-11T05:40:28+0000";...

CVE-2005-1639

The connected PT-Security entry confirms a SQL injection in Sigma ISP Manager 6.6 via Sigmaweb.DLL, exploitable by remote attackers through the username, password, or domain fields; impact is arbitrary SQL execution. Remediation guidance: restrict access to the vulnerable fields and avoid using t...

Sigma ISP Manager 6.6 - Sigmaweb.dll SQL Injection

Sigma ISP Manager 6.6 - Sigmaweb.dll SQL Injection source: https://www.securityfocus.com/bid/13640/info Sigma ISP Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to using it in an SQL query...

Sigma ISP Manager 6.6 - 'Sigmaweb.dll' SQL Injection

source: https://www.securityfocus.com/bid/13640/info Sigma ISP Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to using it in an SQL query. Successful exploitation could result in a compromise of...

D-Link DSL Broadband Modem SNMP Cleartext ISP Credential Disclosure

This script uses SNMP to obtain the account and password of the remote ADSL connection. D-Link DSL Broadband routers uses a default community string and stores the ISP credentials in cleartext. C Tenable Network Security, Inc. Ref: Date: 27 Mar 2003 15:31:41 -0000 From: Arhont Information Securit...

IMail Web Service User Aliases / Mailing Lists Admin Vulnerability

IMail Web Service User Aliases / Mailing Lists Admin Vulnerability Date : January 1, 2002 Author : Zeeshan Mustafa [email protected] Application : IPSwitch IMail Web Service Versions Test : 7.05/7.04/7.03/7.02/7.01/6.x Exploitable : Remote Vendor Status : Notified Impact of vulnerability :...

CVE-1999-1128

The CVE-1999-1128 entry describes Internet Explorer 3.01 on Windows 95 as vulnerable. A .isp file is automatically downloaded and executed from remote malicious sites without user prompts, allowing remote arbitrary command execution. The available documents do not specify a remediation or patch, ...