EFTP installation directory disclosure

The remote FTP server can be used to determine the installation directory by sending a request on an unexisting file. An attacker may use this flaw to gain more knowledge about this host, such as its filesystem layout. OpenVAS Vulnerability Test $Id: eftprootdisclosure.nasl 8023 2017-12-07...

osCommerce Directory Traversal Vulnerability

osCommerce is vulnerable to a directory traversal flaw which may be exploited by an attacker to read arbitrary files on the remote server with the privileges of the web server. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are...

E-Shopping Cart Arbitrary Command Execution (WebDiscount)

The eShop WebDiscount CGI is installed. A security problem in this CGI allows anyone to execute arbitrary commands with the privileges of the web server. SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced...

Default password 'debug' for account 'super' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17291";...

Power Up Information Disclosure

The remote server is using the Power Up CGI. This CGI exposes critical system information, and allows remote attackers to read any world readable file. SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced...

RaidenHTTPD < 1.1.31 Directory Traversal Vulnerability

RaidenHTTPD is prone to a remote directory traversal vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BEA WebLogic Scripts Server scripts Source Disclosure

BEA WebLogic may be tricked into revealing the source code of JSP scripts by using simple URL encoding of characters in the filename extension. e.g.: default.js%70 =default.jsp won SPDX-FileCopyrightText: 2001 INTRANODE Some text descriptions might be excerpted from a referenced sources, and are...

Default password 'ibmdb2' for account 'db2fenc1' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11861";...

Default password 'db2as' for account 'db2as' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11864";...

SQLQHit Directory Structure Disclosure

The Sample SQL Query CGI is present. SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10765";...

IdealBB multiple flaws

The remote version of this IdealBB is vulnerable to multiple flaws: SQL injection, cross-site scripting and HTTP response splitting vulnerabilities. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

Use LDAP search request to retrieve information from NT Directory Services

It is possible to disclose LDAP information. SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.12105...

Skull-Splitter Guestbook Multiple HTML Injection Vulnerabilities

The remote version of the Skull-Splitter guestbook is vulnerable to cross-site scripting attacks. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Music Daemon <= 0.0.3 File Disclosure Vulnerability

Music Daemon is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

b2Evolution title SQL Injection

There is an SQL injection vulnerability in the remote version of b2evolution which may allow an attacker to execute arbitrary SQL statements against the remote database by providing a malformed value to the SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a...

Hummingbird Connectivity FTP service XCWD Overflow

The remote host is running the Hummingbird Connectivity FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. This problem allows an attacker to prevent the remote site from sharing some resources with the rest of the world...

formmail.pl

The SPDX-FileCopyrightText: 2005 Mathieu Perrin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10076";...

HCL / IBM / Lotus Domino Administration Databases Accessible (HTTP)

This script determines if some default Lotus Domino databases can be read remotely. SPDX-FileCopyrightText: 2001 Javier Fernández-Sanguino Peña Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Xeneo Web Server 2.2.9.0 DoS

Requesting an overly long URL starting with an interrogation mark as in /?AAAAA....AAAA crashes the remote server possibly Xeneo Web Server. OpenVAS Vulnerability Test $Id: XeneoWebServer2.2.9.0DoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Xeneo Web Server 2.2.9.0 DoS Authors: BEKRAR...

eSeSIX Thintune Thin Client Multiple Vulnerabilities

Multiple security vulnerabilities have been found in Thintune, one of them is a backdoor password SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...