E-Shopping Cart Arbitrary Command Execution (WebDiscount)

The eShop WebDiscount CGI is installed. A security problem in this CGI allows anyone to execute arbitrary commands with the privileges of the web server. SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced...

Xeneo Web Server 2.2.9.0 DoS

Requesting an overly long URL starting with an interrogation mark as in /?AAAAA....AAAA crashes the remote server possibly Xeneo Web Server. OpenVAS Vulnerability Test $Id: XeneoWebServer2.2.9.0DoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Xeneo Web Server 2.2.9.0 DoS Authors: BEKRAR...

eSeSIX Thintune Thin Client Multiple Vulnerabilities

Multiple security vulnerabilities have been found in Thintune, one of them is a backdoor password SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

SQL injection in ReviewPost PHP Pro

There is a flaw in ReviewPost PHP Pro which may allow a malicious attacker to inject arbitrary SQL queries which allows it to fetch data from the database. SPDX-FileCopyrightText: 2004 Astharot Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Psychoblogger SQL Injection

Psychoblogger is prone to an SQL injection vulnerability. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

YaPiG Password Protected Directory Access Flaw

The remote version of YaPiG a flaw that can let a malicious user view images in password protected directories. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Poll It v2.0 cgi

'PollItSSIv2.0.cgi SPDX-FileCopyrightText: 2000 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10459";...

SQL Disclosure in Invision Power Board

There is a vulnerability in the current version of Invision Power Board that allows an attacker to reveal the SQL queries used by the product, and any page that was built by the administrator using the IPB SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a...

File Disclosure in OWL's Workshop

OWL SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only From: Subject: ZH2004-08SA security advisory: OWLS 1.0 Remote arbitrary files retrieving...

myServer 0.4.3 / 0.7 Directory Traversal Vulnerability

This web server is running myServer = 0.4.3 or 0.7. This version contains a directory traversal vulnerability, that allows remote users with no authentication to read files outside the webroot. SPDX-FileCopyrightText: 2003 Westpoint Ltd Some text descriptions might be excerpted from a referenced...

Default password 'public' for account 'public' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17290";...

Unpassworded 'bash' account

The account SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15583";...

Rich Media E-Commerce Stores Sensitive Information Insecurely

A security vulnerability in Rich Media SPDX-FileCopyrightText: 2002 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10874";...

Invision Power Top Site List SQLi Vulnerability

Invision Power Top Site List is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tomcat /status information disclosure

Requesting the URI /status gives information about the currently running Tomcat. SPDX-FileCopyrightText: 2003 StrongHoldNet Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] [DSA 548-2] New imlib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 548-2 [email protected] http://www.debian.org/security/ Martin Schulze October 26th, 2005 http://www.debian.org/security/faq -...

USN-206-1: Lynx vulnerability

Ulf Harnhammar discovered a remote vulnerability in Lynx when connecting to a news server NNTP. The function that added missing escape chararacters to article headers did not check the size of the target buffer. Specially crafted news entries could trigger a buffer overflow, which could be...

[SA17085] CA iGateway Debug Mode HTTP GET Request Buffer Overflow

TITLE: CA iGateway Debug Mode HTTP GET Request Buffer Overflow SECUNIA ADVISORY ID: SA17085 VERIFY ADVISORY: http://secunia.com/advisories/17085/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: CA iGateway 4.x http://secunia.com/product/5821/ CA iGateway 3.x...

[SA17159] Xeobook Guestbook Script Insertion Vulnerability

TITLE: Xeobook Guestbook Script Insertion Vulnerability SECUNIA ADVISORY ID: SA17159 VERIFY ADVISORY: http://secunia.com/advisories/17159/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Xeobook 0.x http://secunia.com/product/5846/ DESCRIPTION: rjonesx has...

Microsoft Collaboration Data Objects Remote Buffer Overflow Vulnerability

Description Microsoft CDO is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the library to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer. This issue presents itself when an attacker sends a...