GLSA-200501-45 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200501-45 Gallery: XSS vulnerability Rafel Ivgi has discovered a cross-site scripting vulnerability where the 'username' parameter is not properly sanitized in 'login.php'. Impact : By sending a carefully crafted URL, an attacker...

GLSA-200501-27 : Ethereal: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-27 Ethereal: Multiple vulnerabilities There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.9, including: The COPS dissector could go into an infinite loop CAN-2005-0006. The DLSw dissector could caus...

MS05-010: Vulnerability in the License Logging Service (885834)

The remote version of Windows contains a flaw in the Logging Service that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed packet to the remote logging service, and would be able to either execute arbitrary code...

Chipmunk Forum Multiple SQL Injections

The remote host is running Chipmunk, a web-based forum written in PHP. The remote version of this software is affected by several SQL injection vulnerabilities that may allow an attacker to execute arbitrary SQL statements on the remote SQL database. %NASLMINLEVEL 70300 C Tenable Network Security...

SUSE-SA:2004:044: kernel

The remote host is missing the patch for the advisory SUSE-SA:2004:044 kernel. Several vulnerabilities have been found and fixed in the Linux kernel. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2004:044 if !...

IceWarp Web Mail Multiple Flaws (3)

The remote host is running IceWarp Web Mail - a webmail solution available for the Microsoft Windows platform. The remote version of this software is vulnerable to multiple input validation issues that could allow an attacker to compromise the integrity of the remote host. %NASLMINLEVEL 70300 C...

ITA Forum Multiple Scripts SQL Injection

The remote host is running ITA Forum, a forum software written in PHP. There is a SQL injection issue in the remote version of this software which may allow an attacker to execute arbitrary SQL statements on the remote host and to potentially overwrite arbitrary files on the remote system, by...

Trend Micro Antivirus Detection and Status

Trend Micro Antivirus, a commercial antivirus software package for Windows, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. C Tenable Network Security, Inc...

Antivirus Software Check

An antivirus application is installed on the remote host, and its engine and virus definitions are up to date. C Tenable, Inc. @PREFERENCES@ include"compat.inc"; if description scriptid16193; scriptversion"1.51"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/05/27";...

Minis minis.php month Parameter Traversal Arbitrary File Access

The remote host is running Minis, a weblogging system written in PHP. The remote version of this software is vulnerable to a directory traversal attack. Input to the 'month' parameter of the 'minis.php' script is not properly sanitized. A remote attacker could exploit this to read arbitrary files...

MPM Guestbook Pro top.php Traversal Arbitrary File Access

The remote host is running MPM Guestbook, a guestbook application written in PHP. There is a flaw in this version which allows an attacker to read arbitrary files on the remote host or to execute arbitrary PHP commands on the remote host by including files hosted on a third-party server...

Invision Community Blog Module eid Parameter SQL Injection

The remote host appears to be running Invision Community Blog, a weblog utility. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands through the 'index.php' script, which may in turn be used to gain administrative access on the remote host. %NASLMINLEVE...

MS05-003: Indexing Service Code Execution (871250)

The remote host contains a version of the Indexing Service that may allow an attacker to execute arbitrary code on the remote host by constructing a malicious query. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid16125; scriptversion"1.37"; scriptcvsdate"Date:...

CVSTrac < 1.1.5 Multiple XSS

The remote host seems to be running CVSTrac, a web-based bug and patch-set tracking system for CVS. According to its version number, the remote installation of CVSTrac has multiple cross-site scripting flaws. A remote attacker could exploit this by tricking a user into requesting a malicious URL,...

ASP-Rider verify.asp username Parameter SQL Injection

The remote host appears to be running ASP-Rider, a set of ASP scripts designed to maintain a blog. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands, which could in turn be used to gain administrative access on the remote host. %NASLMINLEVEL 70300 C...

MS04-043: Vulnerabilities in HyperTerminal (873339)

The remote host contains a version of the HyperTerminal software that could allow an attacker to execute arbitrary code on the remote host by tricking a victim into using Hyperterminal to log into a rogue host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15964;...

MS04-042: Windows NT Multiple DHCP Vulnerabilities (885249)

The remote host has the Windows DHCP server installed. There is a flaw in the remote version of this server that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15965;...

PhpDig < 1.8.5 Unspecified Vulnerability

The remote host is running phpDig, an open source search engine written in PHP. The remote version of this software is affected by a vulnerability that may allow an attacker to tamper with the integrity of the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Blog Torrent btdownload.php file Variable Traversal Arbitrary File Retrieval

There is a remote directory traversal vulnerability in log Torrent, a web-based application that allows users to host files for Bit Torrents. A malicious user can leverage this issue by requesting files outside of the web server root directory with directory traversal strings such as '../'. This...

phpBB viewtopic.php highlight Parameter SQL Injection (ESMARKCONANT)

The remote host is running phpBB. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands in the login form. An attacker could exploit this flaw to bypass the authentication of the remote host or execute arbitrary SQL statements against the remote database...