CodeThatShoppingCart Multiple Remote Vulnerabilities (SQLi, XSS, ID)

The remote host is running the CodeThat.com ShoppingCart, a shopping cart program written in PHP. The remote version of this software fails to sanitize input to the 'id' parameter of the 'catalog.php' script before using it in a database query. An unauthenticated, remote attacker could leverage...

Interspire ArticleLive Multiple Remote Vulnerabilities (XSS, Auth Bypass)

The remote host is running a version of Interspire ArticleLive that suffers from the following vulnerabilities : - A session handling flaw allowing a remote attacker to gain administrator access. - Multiple cross-site scripting vulnerabilities. The session handling vulnerability can be exploited ...

phpBB Knowledge Base Module kb.php cat Parameter SQL Injection

The installed version of phpBB on the remote host includes the Knowledge Base module, which does not properly sanitize input to the 'cat' parameter of the 'kb.php' script before using it in SQL queries. An attacker can exploit this flaw to modify database queries, potentially even uncovering user...

Coppermine Photo Gallery init.inc.php X-Forwarded-For XSS

According to its version number, the version of Coppermine Photo Gallery installed on the remote host is affected by a cross-site scripting vulnerability when logging user comments. A user with access to the comments module can exploit this flaw using a specially crafted 'X-Forwarded-For' header ...

CubeCart <= 2.0.6 Multiple SQL Injections

The installed version of CubeCart on the remote host suffers from multiple SQL injection vulnerabilities due to its failure to sanitize user input via the 'PHPSESSID' parameter of the 'index.php' script, the 'product' parameter of the 'tellafriend.php' script, the 'add' parameter of the...

RunCMS Remote Arbitrary File Upload

The remote host is running RunCMS / E-Xoops, a content management system written in PHP. According to its banner, the version of this software installed on the remote host may allow a user to upload arbitrary files and potentially run them. This issue arises if avatar uploads are enabled they are...

CPG Dragonfly Multiple XSS

The version of CPG Dragonfly / CPG-Nuke CMS installed on the remote host suffers from multiple cross-site scripting vulnerabilities due to its failure to sanitize user-input to several variables in various modules. An attacker can exploit these flaws to steal cookie-based authentication credentia...

Phorum Detection

The remote host is running Phorum, a web-based message board written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17349; scriptversion"1.19"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Phorum Detection";...

Zorum <= 3.5 Multiple Remote Vulnerabilities

The remote host is running Zorum, an open source electronic forum written in PHP. The version of Zorum installed on the remote host is prone to numerous flaws, including remote code execution, privilege escalation, and SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

paNews Detection

The remote host is running paNews, a news management application written in PHP. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid17253; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate",...

paNews admin_setup.php Multiple Parameter Arbitrary PHP Code Injection

The remote host is running a version of paNews that fails to properly sanitize input passed to the script 'includes/adminsetup.php' and, in addition, allows writes by the web user to the directory 'includes' not the default configuration. Taken together, these flaws allow a remote attacker to run...

PHP-Fusion Detection

The remote host is running PHP-Fusion, a light-weight, open source content management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid16335; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

Chipmunk CMScore Multiple Script SQL Injection

The remote host is running Chipmunk CMScore, a web-based software written in PHP. The remote version of this software is affected by several SQL injection vulnerabilities that may allow an attacker to execute arbitrary SQL statements using the remote SQL database. %NASLMINLEVEL 70300 C Tenable...

Mambo Site Server Multiple Vulnerabilities

An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting attack on this host or execute arbitrary code through the gallery image uploader under the administrator directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...

Gallery: Cross-site scripting vulnerability

Background Gallery is a web application written in PHP which is used to organize and publish photo albums. It allows multiple users to build and maintain their own albums. It also supports the mirroring of images on other servers. Description Rafel Ivgi has discovered a cross-site scripting...

GForge Multiple Script Traversal Arbitrary Directory Listing

The remote host is running GForge, a CVS repository browser written in PHP. The installed version fails to properly sanitize user-supplied data to the 'dir' URI parameter in the 'controller.php' script, or the 'dirname' parameter in the 'controlleroo.php' script. An attacker could exploit this fl...

ITA Forum Multiple Scripts SQL Injection

The remote host is running ITA Forum, a forum software written in PHP. There is a SQL injection issue in the remote version of this software which may allow an attacker to execute arbitrary SQL statements on the remote host and to potentially overwrite arbitrary files on the remote system, by...

MPM Guestbook Pro top.php Traversal Arbitrary File Access

The remote host is running MPM Guestbook, a guestbook application written in PHP. There is a flaw in this version which allows an attacker to read arbitrary files on the remote host or to execute arbitrary PHP commands on the remote host by including files hosted on a third-party server...

Siteman forum.php page Parameter XSS

The remote host is running Siteman, a web-based content management system written in PHP. The remote version of this software is vulnerable to a cross-site scripting attack due to a lack of sanitization of user-supplied data to the 'page' parameter of the 'forum.php' script. Successful exploitati...

MyBB member.php 'uid' Parameter SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the avatar upload system via the 'uid' parameter of the member.php script. If PHP's 'magicquotesgpc' setting is disabled, can exploit this issue to...