ADOdb server.php sql Parameter SQL Injection

The remote host is running ADOdb, a database abstraction library for PHP. The installed version of ADOdb includes a test script named 'server.php' that fails to sanitize user input to the 'sql' parameter before using it in database queries. An attacker can exploit this issue to launch SQL injecti...

CVE-2006-0146

CVE-2006-0146 affects ADOdb for PHP (before 4.70) used by Moodle, Cacti, Mantis, PostNuke, Xaraya, PHPOpenChat, MAXdev MD-Pro, MediaBeez, etc. The vulnerability arises from the MySQL root password being empty, enabling remote SQL execution via the sql parameter. Connected OpenVAS advisories corro...

Acme thttpd < 2.24 CGI Test Script Symlink Arbitrary File Overwrite

Binary data 3282.prm...

CVE-2005-1080

Directory traversal vulnerability in the Java Archive Tool Jar utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. dot dot in filenames in a .jar file...

Horde and IMP Test Script Disclosure

Binary data 1532.prm...

Xitami testssi.ssi HTTP Header XSS

The remote Xitami server is distributed with a script for testing server-side includes, '/testssi.ssi'. This script is vulnerable to a cross-site scripting issue when sent a request with a malformed Host or User-Agent header. An attacker may exploit this flaw the steal the authentication...

Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/9737/info It has been reported that BadBlue Server may be prone to a remote path disclosure vulnerability that may allow an attacker to disclose the installation path by issuing a request for 'phptest.php' script. BadBlue version 2.4 has been reported to ...

Acme thttpd 1.9/2.0.x - CGI Test Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/9474/info thttpd is prone to a cross-site scripting vulnerability in the CGI test script. This could permit a remote attacker to create a malicious link to the web server that includes hostile HTML and script code. If this link were followed, the hostile...

PT-1996-1006 · Apache +1 · Apache Http Server +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows access to a list of arbitrary files on a web host via the nph-test-cgi script. Recommendations: At the moment, there is no information about a newer version that contai...