IBProArcade index.php SQL Injection

One of the ibProArcade SPDX-FileCopyrightText: 2004 Ami Chayun Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.16086";...

Oracle 9i Application Server SOAP Configuration File Accessible - Active Check

In a default installation of Oracle 9i Application Server AS v.1.0.2.2.1, it is possible to access some configuration files. These file includes detailed information on how the product was installed in the server including where the SOAP provider and service manager are located as well as...

EFTP installation directory disclosure

The remote FTP server can be used to determine the installation directory by sending a request on an unexisting file. An attacker may use this flaw to gain more knowledge about this host, such as its filesystem layout. OpenVAS Vulnerability Test $Id: eftprootdisclosure.nasl 8023 2017-12-07...

Default password 'db2as' for account 'db2as' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11864";...

Power Up Information Disclosure

The remote server is using the Power Up CGI. This CGI exposes critical system information, and allows remote attackers to read any world readable file. SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced...

b2Evolution title SQL Injection

There is an SQL injection vulnerability in the remote version of b2evolution which may allow an attacker to execute arbitrary SQL statements against the remote database by providing a malformed value to the SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a...

BEA WebLogic Scripts Server scripts Source Disclosure

BEA WebLogic may be tricked into revealing the source code of JSP scripts by using simple URL encoding of characters in the filename extension. e.g.: default.js%70 =default.jsp won SPDX-FileCopyrightText: 2001 INTRANODE Some text descriptions might be excerpted from a referenced sources, and are...

Use LDAP search request to retrieve information from NT Directory Services

It is possible to disclose LDAP information. SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.12105...

IdealBB multiple flaws

The remote version of this IdealBB is vulnerable to multiple flaws: SQL injection, cross-site scripting and HTTP response splitting vulnerabilities. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

Default password 'ibmdb2' for account 'db2fenc1' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11861";...

osCommerce Directory Traversal Vulnerability

osCommerce is vulnerable to a directory traversal flaw which may be exploited by an attacker to read arbitrary files on the remote server with the privileges of the web server. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are...

Default password 'debug' for account 'super' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17291";...

Music Daemon <= 0.0.3 File Disclosure Vulnerability

Music Daemon is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQLQHit Directory Structure Disclosure

The Sample SQL Query CGI is present. SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10765";...

Skull-Splitter Guestbook Multiple HTML Injection Vulnerabilities

The remote version of the Skull-Splitter guestbook is vulnerable to cross-site scripting attacks. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

RaidenHTTPD < 1.1.31 Directory Traversal Vulnerability

RaidenHTTPD is prone to a remote directory traversal vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

formmail.pl

The SPDX-FileCopyrightText: 2005 Mathieu Perrin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10076";...

Hummingbird Connectivity FTP service XCWD Overflow

The remote host is running the Hummingbird Connectivity FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. This problem allows an attacker to prevent the remote site from sharing some resources with the rest of the world...

VisualRoute Web Server Detection

We detected the remote web server as being a VisualRoute web server. This server allows attackers to perform a traceroute to a third party's hosts without revealing themselves to the target of the traceroute. OpenVAS Vulnerability Test $Id: visualrouteserverdetect.nasl 5676 2017-03-22 16:29:37Z c...

E-Shopping Cart Arbitrary Command Execution (WebDiscount)

The eShop WebDiscount CGI is installed. A security problem in this CGI allows anyone to execute arbitrary commands with the privileges of the web server. SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced...