Allegro Software RomPager 2.10 Denial of Service

The remote host is running Allegro Software RomPager version 2.10, according to its banner. This version is vulnerable to a denial of service when sending a specifically crafted malformed request. OpenVAS Vulnerability Test $Id: allegrodos.nasl 8023 2017-12-07 08:36:26Z teissa $ Description:...

Cyberstrong eShop SQL Injection Vulnerabilities

The remote host is running Cyberstrong eShop, a shopping cart written in ASP. The remote version of this software contains several input validation flaws leading to SQL injection vulnerabilities. An attacker may exploit these flaws to affect database queries, possibly resulting in disclosure of...

Kerio WinRoute Firewall HTTP/HTTPS Management Detection

The remote host is running a firewall application. Description : The remote host appears to be running the Kerio WinRoute Firewall application. It is possible to access the HTTP or HTTPS management interface on the host. OpenVAS Vulnerability Test $Id: keriowrfmanagementdetection.nasl 8023...

VisNetic / Merak Mail Server multiple flaws

The remote webmail server is affected by multiple vulnerabilities which may allow an attacker to execute arbitrary commands on the remote host. Description: The remote host is running VisNetic / Merak Mail Server, a multi-featured mail server for Windows. The webmail and webadmin services include...

Discuz! <= 4.0.0 rc4 Arbitrary File Upload Flaw

The remote host is using Discuz!, a popular web application forum in China. According to its version, the installation of Discuz! on the remote host fails to properly check for multiple extensions in uploaded files. An attacker may be able to exploit this issue to execute arbitrary commands on th...

SUSE-SA:2006:014: gpg

The remote host is missing the patch for the advisory SUSE-SA:2006:014 gpg. The GNU Privacy Guard GPG allows crafting a message which could check out correct using '--verify', but would extract a different, potentially malicious content when using '-o --batch'. The reason for this is that a .gpg ...

PHP iCalendar Cookie Data Traversal Local File Inclusion

The remote host appears to be running PHP iCalendar, a web-based iCal file viewer / parser written in PHP. The version of PHP iCalendar installed on the remote host fails to sanitize input to cookie data normally used to store language and template user preferences before using it in a PHP...

MS06-012: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (905413)

The remote host is running a version of Microsoft Office that could allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. Then a bug in the font parsing handler would result in code execution. C Tenable...

Pixelpost < 1.5 RC1 showimage Parameter SQL Injection

The remote host is running Pixelpost, a photo blog application based on PHP and MySQL. The version of Pixelpost installed on the remote host fails to sanitize input to the 'showimage' parameter of the 'index.php' script before using it to construct database queries. Provided PHP's 'magicquotesgpc...

GLSA-200603-01 : WordPress: SQL injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200603-01 WordPress: SQL injection vulnerability Patrik Karlsson reported that WordPress 1.5.2 makes use of an insufficiently filtered User Agent string in SQL queries related to comments posting. This vulnerability was already...

SUSE-SA:2006:011: heimdal

The remote host is missing the patch for the advisory SUSE-SA:2006:011 heimdal. Heimdal is a Kerberos 5 implementation from the Royal Institut of Techno- logy in Stockholm. This update fixes two bugs in heimdal. The first one occurs in the rsh daemon and allows an authenticated malicious user to...

Limbo CMS index.php Itemid Parameter Arbitrary Command Execution

The remote host is running Limbo CMS, a content-management system written in PHP. The installed version of Limbo fails to sanitize input to the 'Itemid' parameter before using it as part of a search string in an 'eval' statement in the 'classes/adodbt/readtable.php' script. Regardless of PHP's...

FreeBSD nfsd Malformed NFS Mount Request Remote DoS

The NFS server on the remote host appears to be one from FreeBSD that causes a kernel panic when it receives a malformed NFS mount request via TCP. An unauthenticated remote attacker can leverage this flaw to crash the remote host. C Tenable Network Security, Inc. include"compat.inc"; if...

MS Internet Explorer 6.0 SP0 IsComponentInstalled() Remote Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

ViRobot Linux Server filescan Authentication Bypass

The remote host is running ViRobot Linux Server, a commercial antivirus application server. The installed version of ViRobot Linux Server has a flaw such that an attacker can bypass authentication and gain access to its 'filescan' component by supplying a special cookie. An unauthenticated attack...

SUSE-SA:2006:008: openssh

The remote host is missing the patch for the advisory SUSE-SA:2006:008 openssh. A problem in the handling of scp in openssh could be used to execute commands on remote hosts even using a scp-only configuration. This requires doing a remote-remote scp and a hostile server. CVE-2006-0225 On SUSE...

MS06-004: Cumulative Security Update for Internet Explorer (910620)

The remote host is missing the IE cumulative security update 910620. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Tenable Network Security, Inc. include"compat.inc"; if description scriptid20904;...

LinPHA <= 1.0 Multiple Vulnerabilities

The remote host is running LinPHA, a web photo gallery application written in PHP. The installed version of LinPHA suffers from a number of flaws, several of which could allow an unauthenticated attacker to view arbitrary files or to execute arbitrary PHP code on the remote host, subject to the...

ICMP Domain Name Request

The remote host answered to an ICMP 'Domain Name Request' as defined in RFC 1788. Such a request is designed to obtain the DNS name of a host based on its IP. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: RFC 1788 http://www.dolda2000.com/fredrik/icmp-dn/...

WorldMail-3.0.pl.txt

Eudora WorldMail 3.0 Windows 2000 Remote System Exploit November 2005 Tested on Windows 2000 Server SP4 infoATcom-winner.com http://www.com-winner.com http://www.com-winner.com/CWCOM/cwc-index/ use IO::Socket::INET; use strict; win32bind - EXITFUNC=seh LPORT=4444 Size=344 Encoder=PexFnstenvSub...