109 matches found
Joomla! Cross Site Scripting Vulnerability
The host is running Joomla! and is prone to Cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlaxssvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Joomla! Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks GmbH,...
Free QBoard qb_path远程文件包含漏洞
BUGTRAQ ID: 18788 Free Qboard是高级的开放源码留言簿服务。 Free Qboard的多个模块中存在远程文件包含漏洞，远程攻击者可能利用此漏洞在服务器上执行任意命令。 具体漏洞代码如下： ---------------------- 1- index.php include $qbpath."incs/mysql.php"; include $qbpath."incs/crypt.php"; ---------------------------------- 2- about.php include $qbpath."incs/header.php";...
Artmedic Webdesign Kleinanzeigen Script - Remote File Inclusion
/ source: https://www.securityfocus.com/bid/10746/info Kleinanzeigen is prone to a file include vulnerability. This issue could allow a remote attacker to include malicious files containing arbitrary code to be executed on a vulnerable computer. If successful, the malicious script supplied by the...
EasyDynamicPages 1.0 - 'config_page.php' PHP Remote File Inclusion
source: https://www.securityfocus.com/bid/9338/info EasyDynamicPages is prone to a remote file include vulnerability in a configuration script. This will permit a remote attack to include malicious PHP scripts from remote servers, which will then be executed by the web server hosting the vulnerab...
ttCMS 2.2 / ttForum 1.1 - 'news.php?template' Remote File Inclusion
source: https://www.securityfocus.com/bid/7542/info A remote file include vulnerability has been reported for both ttForum and ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'News.php' and 'Install.php' scripts, it is possible for a remote attacker to include a...
Выполнение JavaScript в контексте сервера
Можно вставить javascript в URL таким образом, что javascript будет выполнен в контексте сервера...
Microsoft Frontpage Server Remote Application Deployment (RAD) component vulnerable to buffer overflow via malformed packet sent to server component
Overview Microsoft Frontpage Server Remote Application Deployment RAD component contains an unchecked buffer which can allow an intruder to execute arbitrary code with the privileges of IUSRmachinename or system. Description A buffer overflow in the Microsoft Frontpage Server Remote Application...
Buffer Overflow in Lotus Domino Mail Server
Overview Lotus Domino R5 SMTP Server Contains a Buffer Overflow Description The Lotus Domino R5 SMTP server allows an administrator to restrict the domains from which the server will accept mail. In versions of Domino R5 prior to version 5.0.6 with domain restrictions enabled an intruder may be...