WebStores 2000 browse_item_details.asp SQL Injection

The remote web server is running WebStores 2000, a set of ASP scripts designed to set up an e-commerce store. There is a flaw in the version of WebStores used on the remote host that may allow an attacker to make arbitrary SQL statements to the backend database. An attacker may be able to exploit...

Apple QuickTime/Darwin Streaming Server 4.1.3 QTSSReflector Module - Integer Overflow

source: https://www.securityfocus.com/bid/7659/info A vulnerability has been reported for Apple QuickTime/Darwin Streaming Server. The problem is said to occur within the QTSSReflector module while processing the ANNOUNCE command. Specifically, by specifying an extremely large value as an argumen...

PHP-Nuke 6.0/6.5 Web_Links Module - Full Path Disclosure

source: https://www.securityfocus.com/bid/7589/info The WebLinks module for PHP-Nuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker. An attacker may use the information gathered in this manner to mount further attacks...

NetCharts Server Default Password

The remote host is running the NetCharts server on this port, with the default login and password of 'Admin/Admin'. An attacker may use this misconfiguration to control the remote server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Libopt.a 3.1x - Error Logging Buffer Overflow (1)

/ source: https://www.securityfocus.com/bid/7433/info Libopt library has been reported prone to a buffer overflow vulnerability. It has been reported that several Libopt.a error logging functions, may be prone to buffer overflow vulnerabilities when handling excessive data. The data may be suppli...

SheerDNS 1.0 - Information Disclosure

// source: https://www.securityfocus.com/bid/7336/info A vulnerability has been discovered in SheerDNS. Due to insufficient sanitization of DNS requests, an attacker may be able to view the contents of an arbitrary system directory or file. Information obtained by exploiting this issue may aid an...

FileMaker Pro network protocol sends passwords to any client attempting to connect to a shared database.

I recently discovered a serious bug in FileMaker Pro's database sharing. FileMaker have just released an advisory about this on their security pages: http://www.filemaker.com/support/security -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: FileMaker Pro network protocol sends passwords to...

Samba 2.2.x Remote Root Buffer Overflow Exploit

Exploit for linux platform in category remote exploits =============================================== Samba 2.2.x Remote Root Buffer Overflow Exploit =============================================== !/usr/bin/perl Header Name: trans2root.pl Purpose: Proof of concept exploit for Samba 2.2.x...

ScozBook 1.1 - Full Path Disclosure

source: https://www.securityfocus.com/bid/7236/info A path disclosure vulnerability has been reported for ScozBook. The issue occurs when a request is made to the view.php script page. Access to sensitive filesystem information may aid an attacker in launching further attacks against a target...

Sambar Server 5.x - Information Disclosure

source: https://www.securityfocus.com/bid/7207/info An information disclosure vulnerability has been reported for Sambar Server. The vulnerability exists in some files existing in Sambar Server's cgi-bin directory. An attacker can exploit this vulnerability by making a request for these files. Th...

PHP 4.3 - socket_iovec_alloc() Integer Overflow

PHP 4.3 - socketiovecalloc Integer Overflow source: https://www.securityfocus.com/bid/7187/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketiovecalloc and may allow an attacker to corrupt memory. Specifically, the affected function fails to...

Leif Wright ad.cgi file Parameter Arbitrary Command Execution

The CGI 'ad.cgi' is installed. This CGI has a well known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Basit CMS Multiple Script XSS

Basit cms 1.0 has a cross-site scripting bug. An attacker may use it to perform a cross-site scripting attack on this host. In addition to this, it is vulnerable to a SQL insertion attack that could allow an attacker to get the control of your database. %NASLMINLEVEL 70300 written by K-Otik.com...

HyperBook Guestbook

Product : HyperBook Guestbook Version : 1.12 WebSite : http://diamond-back.com Problem : phpinfo Description: ------------ phpinfo.php =========== ?php phpinfo; ? =========== Exploit: -------- http://somehost/book/phpinfo.php...

Man Program 1.5 - Unsafe Return Value Command Execution

Man Program 1.5 - Unsafe Return Value Command Execution source: https://www.securityfocus.com/bid/7066/info It has been reported that the man program does not properly handle some types of input. When a man page is processed that could pose a potential security risk, the program reacts in a way...

Default Password (manager) for 'system' Account

The account 'system' has the password 'manager'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "system"; password = "manager"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11257;...

FreeBSD Security Advisory FreeBSD-SA-02:44.filedesc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-02:44.filedesc Security Advisory The FreeBSD Project Topic: file descriptor leak in fpathconf Category: core Module: kernel Announced: 2003-01-07 Credits: Joost P...

Mambo Site Server 4.0.11 - Full Path Disclosure

Mambo Site Server 4.0.11 - Full Path Disclosure source: https://www.securityfocus.com/bid/6387/info A vulnerability has been discovered in Mambo Site Server. Requesting the 'index.php' script with an invalid parameter will cause an error page to be generated containing the path of the Mambo scrip...

acFreeProxy Cross-Site Scripting Vulnerability/Possible DoS

Product Information acFreeProxy aka "acfp" is an HTTP/1.x proxy for Microsoft Windows environments. It offers caching, and several other features, and has a plug-in format designed for extensibility. A flaw in the product may allow attackers to execute content across domains. Description The prox...

Viralator CGI Script Arbitrary Command Execution

The CGI 'viralator.cgi' is installed. Some versions of this CGI are don't check properly the user input and allow anyone to execute arbitrary commands with the privileges of the web server. No flaw was tested. Your script might be a safe version. %NASLMINLEVEL 70300 C Tenable Network Security, In...