Microsoft .NET Handlers Enumeration

It is possible to obtain the list of handlers the remote ASP.NET web server supports. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid24242; scriptversion "1.10"; scriptcvsdate"Date: 2018/11/15 20:50:25"; name"english" = "Microsoft .NET Handlers Enumeration";...

Microsoft .NET Version Information Disclosure

By requesting a non-existent .aspx file on the remote web server, it is possible to obtain the exact version number of the remote .NET framework. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid24243; scriptversion"1.14";...

WoltLab Burning Board search.php Multiple Parameter SQL Injection

The version of Burning Board / Burning Board Lite on the remote host fails to sanitize user input to the 'boardids' parameter of the 'search.php' script before using it in database queries. Regardless of PHP's 'registerglobals' and 'magicquotesgpc' settings, an unauthenticated, remote attacker ca...

Easy Address Book Web Server Query Remote Format String

It appears that the remote web server is affected by a remote format string issue. Using a specially crafted URL containing a format string specifier, an unauthenticated, remote attacker can crash the affected application and possibly execute arbitrary code on the remote host. %NASLMINLEVEL 70300...

e107 email.php Arbitrary Mail Relay

The version of e107 installed on the remote host contains a script, 'email.php' that allows an unauthenticated user to send email messages to arbitrary users and to control, to a large degree, the content of those messages. This issue can be exploited to send spam or other types of abuse through...

phpBannerExchange Template Class Local File Inclusion

The remote host is running phpBannerExchange, a banner exchange script written in PHP. The version of phpBannerExchange installed on the remote host uses a template class that fails to sanitize user-supplied input before using it in a PHP 'include' function. An unauthenticated attacker can exploi...

Mantis Multiple Flaws (4)

The remote web server contains a PHP application that is affected by several flaws. Description : According to its banner, the version of Mantis on the remote host fails to sanitize user-supplied input to the 'gdbtype' parameter of the 'core/databaseapi.php' script. Provided PHP's 'registerglobal...

WebGUI < 6.7.6 arbitrary command execution

The remote web server contains a CGI script that is prone to arbitrary code execution. Description : The remote host is running WebGUI, a content management system from Plain Black Software. The installed version of WebGUI on the remote host fails to sanitize user-supplied input via the OpenVAS...

Digital Scribe login.php SQL Injection flaw

The remote web server contains a PHP script which is vulnerable to a SQL injection. Description : The remote web server hosts Digital Scribe, a student-teacher set of scripts written in PHP. The version of Digital Scribe installed on the remote host is prone to SQL injection attacks through the...

Calendar Express Multiple Flaws

The remote web server contains a PHP script which is vulnerable to a cross site scripting and SQL injection vulnerability. Description : The remote host is using Calendar Express, a PHP web calendar. A vulnerability exists in this version which may allow an attacker to execute arbitrary HTML and...

Calendar Express Multiple Flaws

The remote web server is using Calendar Express which is vulnerable to a cross site scripting and SQL injection vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Horde < 3.1 go.php url Parameter File Disclosure

Binary data 3477.prm...

Internet Explorer inline content filename extension vulnerability

Added: 11/25/2005 CVE: CVE-2001-0727 BID: 3578 OSVDB: 3033 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Using a null byte %00 in the filename field found in the Content-disposition header, a remote web server may be able to...

phpWebThings Multiple Scripts SQL Injection

The remote host is running the phpWebThings application framework. The version of phpWebThings installed on the remote host does not properly sanitize user input in the 'forum' and 'msg' parameters of 'forum.php' script before using it in database queries. An attacker can exploit this vulnerabili...

BasiliX Content-Type XSS Vulnerability

The remote web server contains a PHP script which is vulnerable to a cross site scripting issue. Description : The remote host appears to be running BasiliX version 1.1.1 or lower. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to cause a victim to...

WebLibs File Disclosure Vulnerability (Dec 2004) - Active Check

WebLibs is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

thttpd ssi file retrieval

The remote HTTP server allows an attacker to read arbitrary files on the remote web server, by employing a weakness in an included ssi package, by prepending pathnames with %2e%2e/ hex-encoded ../ to the pathname. Example: GET /cgi-bin/ssi//%2e%2e/%2e%2e/etc/passwd will return /etc/passwd...

Mediahouse Statistics Web Server Multiple Vulnerabilities (2001)

Mediahouse Statistics web server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Zope ZClass Permission Mapping Bug

The remote web server contains an application server that is prone to a privilege escalation flaw. Description : The remote web server uses a version of Zope which is older than version 2.3.3. In such versions, any user can visit a ZClass declaration and change the ZClass permission mappings for...

Basit cms Cross Site Scripting Bugs

The remote web server contains a PHP script which is vulnerable to a cross site scripting and SQL injection issue. Description : Basit cms 1.0 has a cross site scripting bug. An attacker may use it to perform a cross site scripting attack on this host. In addition to this, it is vulnerable to a S...