Trend Micro IMSS Console Management Detection (HTTP)

The remote host appears to run Trend Micro Interscan Messaging Security Suite, connections are allowed to the web console management. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

Trend Micro IWSS Console Management Detection (HTTP)

The remote host appears to run the Trend Micro Interscan Web Security Suite. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Snif File Disclosure

It is possible to make the remote host return the content of any world readable file by requesting a path outside the bound HTML root directory from the Snif program. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

SquirrelMail Cross-Site Scripting Vulnerability

The remote host seems to be vulnerable to a security problem in SquirrelMail. Its script SPDX-FileCopyrightText: 2005 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RIP poisoning

It was possible to poison the remote host routing tables through the RIP protocol. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only References:...

phpBB < 2.0.9 SQLi Vulnerability

phpBB is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpbb:phpbb";...

EFTP < 2.0.8.348 Information Disclosure Vulnerability

The remote FTP server can be used to determine if a given file exists on the remote host or not, by adding dot-dot-slashes in front of them. SPDX-FileCopyrightText: 2001 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

FuseTalk forum XSS

The remote host is using FuseTalk, a web based discussion forum. A vulnerability exists in the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Serv-U FTP Server SITE CHMOD Command Stack Overflow Vulnerability

The remote host is running Serv-U FTP server. There is a bug in the way this server handles arguments to the SITE CHMOD requests. SPDX-FileCopyrightText: 2004 Astharot Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

IMAP Unencrypted Cleartext Login

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. NOTE: Valid credentials needs to given to the settings of SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CactuShop XSS and SQL injection flaws

The remote host runs CactuShop, an e-commerce web application written in ASP. The remote version of this software is vulnerable to cross-site scripting due to a lack of sanitization of user-supplied data in the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be...

PowerPortal Path Dislcosure

The remote host is using PowerPortal, a content management system, written in PHP. A vulnerability exists in the remote version of this product which may allow a remote attacker to cause the product to disclose the path it is installed under. An attacker may use this flaw to gain more knowledge...

BlackJumboDog FTP server multiple command overflow

The remote host is running BlackJumboDog FTP server. This FTP server fails to properly check the length of parameters in multiple FTP commands, most significant of which is USER, resulting in a stack overflow. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted...

eZ/eZphotoshare Denial of Service

The remote host runs eZ/eZphotoshare, a service for sharing and exchanging digital photos. This version is vulnerable to a denial of service attack. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

Microsoft IIS IDA/IDQ Path Disclosure Vulnerability (MS00-006) - Active Check

IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. SPDX-FileCopyrightText: 2000 Filipe Custodio Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Invision Power Board Calendar SQL Injection Vulnerability

The remote host is running Invision Power Board - a CGI suite designed to set up a bulletin board system on the remote web server. A vulnerability has been discovered in the sources/calendar.php file that allows unauthorized users to inject SQL commands. SPDX-FileCopyrightText: 2003 Noam Rathaus...

WackoWiki XSS

The remote host seems to be running the WackoWiki CGI suite and may be vulnerable to a remote authentication attack. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

TYPSoft directory traversal flaw

The remote host seems to be running TYPSoft FTP earlier than 0.97.5 This version is prone to directory traversal attacks. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Snif Cross Site Scripting

The remote host is running the SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11949";...

Microsoft Internet Explorer 5.01, 5.5, 6.0 Cumulative Patch (890923, MS05-020)

The July 2004 Cumulative Patch for IE is not applied on the remote host. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Also supersedes...