PunBB < 1.2.8 Multiple Vulnerabilities

Binary data 3235.prm...

ATutor Password Reminder SQL Injection

The remote host is running ATutor, an open source, web-based, Learning Content Management System LCMS designed with accessibility and adaptability in mind. The remote version of this software contains an input validation flaw in the 'passwordreminder.php' script. This vulnerability occurs only wh...

Calendar Express Multiple Vulnerabilities (SQLi, XSS)

The remote host is using Calendar Express, a PHP web calendar. Vulnerabilities exist in this version that could allow an attacker to execute arbitrary HTML and script code in the context of the user's browser, and SQL injection. An attacker could exploit these flaws to use the remote host to...

Firefox < 1.0.7 Multiple Vulnerabilities

The remote host is using Firefox, an alternative web browser. The installed version of Firefox contains various security issues, several of which are critical as they can be easily exploited to execute arbitrary shell code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ...

PunBB < 1.2.7 Multiple Vulnerabilities

The version of PunBB installed on the remote host suffers from several flaws. - Multiple SQL Injection Vulnerabilities The application fails to adequately sanitize user- supplied input to the 'searchid' parameter of the 'search' script as well as an unspecified parameter in one of the admin scrip...

NOD32 Antivirus ARJ Archive Filename Handling Overflow

The remote host is running NOD32 Antivirus, from eset. The installed version of NOD32 Antivirus is reportedly prone to a heap-based buffer overflow when processing ARJ archives with long filenames. An attacker may be able to exploit this issue to execute arbitrary code on the remote host. C Tenab...

RHEL 4 : exim (RHSA-2005:358)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:358 advisory. Exim is a mail transport agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. An integer overflow fla...

HP Data Protector Detection

HP Data Protector formerly HP OpenView Storage Data Protector, a data management solution that automates backup and recovery, is running on the remote host. Josh Zlatin-Amishav josh at ramat dot cc GPLv2 Changes by Tenable: 2016 May 17 Added banner string detection for new HP naming scheme HPE -...

Land Down Under < 802 events.php SQL Injection

Binary data 3209.prm...

WebGUI < 6.7.3 Multiple Command Execution Vulnerabilities

The remote host is running WebGUI, a content management system from Plain Black Software. According to its banner, the installed version of WebGUI on the remote host fails to sanitize user-supplied input to various sources before using it to run commands. By leveraging these flaws, an attacker ma...

CUPS Server <= 1.1 (Get Request) Denial of Service Exploit

Exploit for linux platform in category dos / poc ========================================================== CUPS Server include include include include char EVIL = "\x2e\x2e\x5c\x2e\x2e"; void usagechar argv0 fprintfstdout, "cups/1.x server freeze and remote cpu usage fuckup\n"; fprintfstdout,...

CUPS Server 1.1 - GET Denial of Service

CUPS Server 1.1 - GET Denial of Service / dl-cups.c v0.1 CUPS server freeze and processor load "fuckup" exploit bug found and exploit coded by tracewar darklogic team for educaional purposes only. greetz goes to: setuid, matan. / include include include include include char EVIL =...

w-Agora index.php site Parameter Traversal Arbitrary File Access

The remote host is running w-agora, a web-based forum application written in PHP. The remote version of this software is prone to directory traversal attacks. A remote attacker could request a specially crafted URL to read arbitrary files on the remote system with the privileges of the web server...

AWStats Referrer Header Arbitrary Command Execution

The remote host is running AWStats, an open source web analytics tool used for analyzing data from internet services such as web, streaming, media, mail and FTP servers. The version of AWStats installed on the remote host collects data about the web referrers and uses them without proper sanitati...

SilverNews < 2.0.4 Multiple Vulnerabilities

The remote host is running SilverNews, a free news script written in PHP. The version of SilverNews installed on the remote host suffers from several flaws : - SQL Injection Vulnerability The application does not sanitize user-supplied input to the 'username' parameter of the 'admin.php' script...

Comdev eCommerce 3.0 Multiple Vulnerabilities (RFI, Traversal)

The remote host is running eCommerce, a web-based shopping system from Comdev. The installed version of eCommerce allows remote attackers to control the 'pathdocroot' parameter used when including PHP code in the 'config.php' script. By leveraging this flaw, an attacker may be able to view...

Ares Fileshare Detection

Ares Fileshare is installed on the remote host. Ares Fileshare is a P2P application that supports connecting to several P2P networks; eg, Gnutella and OpenFT. As such, it may not be suitable for use in a business environment. In addition, note that it's not possible for Nessus to determine the...

CA ARCServe MSSQL Agent Detection

The BrightStor ARCServe MSSQL Agent is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid19376; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"CA ARCServe MSSQL Agent...

GLSA-200507-24 : Mozilla Suite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200507-24 Mozilla Suite: Multiple vulnerabilities The following vulnerabilities were found and fixed in the Mozilla Suite: 'mozbugra4' and 'shutdown' discovered that the Mozilla Suite was improperly cloning base objects MFSA...

SUSE-SA:2005:043: zlib

The remote host is missing the patch for the advisory SUSE-SA:2005:043 zlib. The previous zlib update for CVE-2005-2096 fixed a flaw in zlib that could allow a carefully crafted compressed stream to crash an application. While the original patch corrected the reported overflow, Markus Oberhumer...