WebAPP Apage.CGI remote command execution flaw

Due to a lack of user input validation, an attacker can exploit the OpenVAS Vulnerability Test $Id: webappapagecmdexe.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: WebAPP Apage.CGI remote command execution flaw Authors: David Maciejak Copyright: Copyright C 2005 David Maciejak This program...

Oracle 9i Application Server Default Error Information Disclosure Vulnerability - Active Check

Oracle 9i Application Server AS allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP file. The default error generated leaks the pathname in an error message. SPDX-FileCopyrightText: 2003 Javier Fernandez-Sanguino Some text...

Serendipity < 0.7.1 XSS Vulnerability - Active Check

The remote version of Serendipity is vulnerable to cross-site scripting attacks due to a lack of sanity checks on the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Unprotected SiteScope Service (HTTP)

The SiteScope web service has no password set. An attacker who can connect to this server could view usernames and passwords stored in the preferences section or reconfigure the service. SPDX-FileCopyrightText: 2001 Digital Defense Inc. Some text descriptions might be excerpted from a referenced...

Oracle 9i Application Server Globals.jsa Access Information Disclosure Vulnerability - Active Check

In the default configuration of Oracle 9i Application Server AS, it is possible to make requests for the globals.jsa file for a given web application. These files should not be returned by the server as they often contain sensitive information. SPDX-FileCopyrightText: 2002 Matt Moore Some text...

Default password 'synnet' for account 'debug' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17289";...

HP Jet Admin 7.x Directory Traversal

The remote HP Web JetAdmin suffers from a number of vulnerabilities. The current running version is vulnerable to a directory traversal attack via the setinfo.hts script. SPDX-FileCopyrightText: 2004 wirepair Some text descriptions might be excerpted from a referenced sources, and are Copyright C...