Check for Apache Multiple / vulnerability

Certain versions of Apache for Win32 have a bug wherein remote users can list directory entries. Specifically, by appending multiple /'s to the HTTP GET command, the remote Apache server will list all files and subdirectories within the web root as defined in httpd.conf. OpenVAS Vulnerability Tes...

JS.Scob.Trojan or Download.Ject Trojan

JS.Scob.Trojan or Download.Ject Trojan JS.Scob.Trojan or Download.Ject is a simple Trojan that executes a JavaScript file from a remote server. The Trojan's dropper sets it as the document footer for all pages served by IIS Web sites on the infected computer. The presence of Kk32.dll or Surf.dat...

Windows Administrator NULL FTP password

The remote server is incorrectly configured with a NULL password for the user 'Administrator' and has FTP enabled. OpenVAS Vulnerability Test $Id: ftpadministrator.nasl 6040 2017-04-27 09:02:38Z teissa $ Description: Windows Administrator NULL FTP password Authors: Keith Young Copyright: Copyrigh...

IMP HTML+TIME XSS Vulnerability

The remote server is running at least one instance of IMP whose version number is 3.2.4 or lower. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to inject arbitrary content, including script, in a specially crafted MIME message. To have an effect, the...

wu-ftpd ABOR privilege escalation

The remote Wu-FTPd server seems to be vulnerable to a remote privilege escalation. This version contains a flaw that may allow a malicious user to gain access to unauthorized privileges. Specifically, there is a flaw in the way that the server handles an ABOR command after a data connection has...

SiteScope Web Managegment Server Detection (HTTP)

The remote web server is running the SiteScope Management web server. SPDX-FileCopyrightText: 2005 Noam Rathaus / SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Horde IMP < 3.2.4 Content-Type XSS Vulnerability

The remote server is running at least one instance of Horde IMP whose version number is between 2.0 and 3.2.3 inclusive. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

foxweb <= 2.5 CGI Buffer Overflow Vulnerability

The foxweb.dll or foxweb.exe CGI is installed. Versions 2.5 and below of this CGI program have a security flaw that lets an attacker execute arbitrary code on the remote server. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are...

MySQL Eventum Multiple flaws

The remote host seems to be running MySQL Eventum, a user-friendly and flexible issue tracking system written in PHP. The remote version of this software is vulnerable to cross-site scripting attacks, through multiple scripts. With a specially crafted URL, an attacker can use the remote server to...

Sgdynamo 'sgdynamo.exe' Physical Path Disclosure Vulnerability

The CGI SPDX-FileCopyrightText: 2003 Scott Shebby Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11954";...

Checks for listrec.pl

The SPDX-FileCopyrightText: 2001 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10769"; scriptversion"2023-08-01T13:29:10+0000"...

bBlog SQL injection flaw

The remote server runs a version of bBlog which is as old as or older than version 0.7.4. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

JS.Scob.Trojan or Download.Ject Trojan

JS.Scob.Trojan or Download.Ject Trojan were detected. SPDX-FileCopyrightText: 2004 Jeff Adams Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

YusASP Web Asset Manager Vulnerability

YusASP Web Asset Manager is a complete file manager for your website. If left uprotected, the YusASP allows you to anage the remote server SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Horde < 3.2.2 IMP_MIME_Viewer_html class XSS Vulnerabilities

The remote server is running at least one instance of Horde IMP whose version number is between 3.0 and 3.2.1 inclusive. SPDX-FileCopyrightText: 2003-2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

AIX maintenance level

This plugin makes sure the remote AIX server is running the newest maintenance package. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SOCKS4A Hostname Overflow DoS Vulnerability

It was possible to kill the remote SOCKS4A server by sending a request with a too long hostname. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

dwhttpd format string

The remote web server is vulnerable to a format string attack. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AspUpload vulnerability

At least one example script distributed with AspUpload appears to be installed on the remote web server. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

YaCy Peer-To-Peer Search Engine XSS

The remote host contains a peer-to-peer search engine that is prone to cross-site scripting attacks. Description : The remote host runs YaCy, a peer-to-peer distributed web search engine and caching web proxy. The remote version of this software is vulnerable to multiple cross-site scripting due ...