Comment Rating 2.9.23 Path Disclosure / SQL Injection

================================= Vulnerability ID: HTB22842 Reference: http://www.htbridge.ch/advisory/pathdisclosureincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 Februar...

BlogEngine.NET Unauthorized Access / Directory Traversal

Product: BlogEngine.NET Vendor informed: 24 Sep 2010 Fixed Version Released: 01 Jan 2011 Affected Versions: 1.6.x and prior versions Severtiy: Critical Impact: Information Discloure and System Compromise Description: BlogEngine.NET is an open source .NET blogging project that was born out of desi...

Blog:CMS 4.2.1e - Multiple Vulnerabilities

Vulnerability ID: HTB22727 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinblogcms.html Product: BLOG:CMS Vendor: Radek Hulán http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...

JAF CMS 4.0 RC2 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================== JAF CMS 4.0 RC2 Multiple Vulnerabilities ======================================== Product: SweetRice CMS Vendor: basic-cms.org http://www.basic-cms.org/ Vulnerable Version: 0.6.7 Vendor Notification: 21...

MODX <= 2.0.2 Multiple Vulnerabilities - Active Check

MODX is prone to a local file include LFI vulnerability and a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

SigPlus Pro ActiveX Control 'LCDWriteString()' Buffer Overflow Vulnerability

This host is installed with SigPlus Pro ActiveX Control and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsigplusproactivexcontrolbofvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ SigPlus Pro ActiveX Control 'LCDWriteString' Buffer Overflow Vulnerability Authors: Soor...

DiamondList v0.1.6 CSRF Vulnerability

Exploit for php platform in category web applications ===================================== DiamondList v0.1.6 CSRF Vulnerability ===================================== Vulnerability ID: HTB22517 Reference: http://www.htbridge.ch/advisory/xsrfcsrfindiamondlist.html Product: DiamondList Vendor:...

httpdx Multiple Vulnerabilities

This host is installed with httpdx and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbhttpdxmultvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ httpdx Multiple Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net Th...

Razor CMS 1.0 Stable Cross Site Scripting

Vulnerability ID: HTB22376 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinrazorcms.html Product: razorCMS Vendor: morgan integrated systems limited Vulnerable Version: 1.0 stable Vendor Notification: 10 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Fixed by Vendor Ri...

Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability (Linux)

The host is installed with Opera Web Browser and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gboperacontentlengthheaderbofvulnlin.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability Linux Authors: Antu Sanadi...

leaftec CMS - Multiple Vulnerabilities

leaftec CMS - Multiple Vulnerabilities Exploit Title: leaftec cms multiple vulnerabilities Date: 21.03.2010 Author: Valentin Höbel Version: Tested on: Debian etch CVE : Code : :: General information :: leaftec cms multiple vulnerabilities discovered :: by Valentin Höbel :: [email protected] ...

Shibboleth Service Provider NULL Character Spoofing Vulnerability - Windows

Shibboleth Service Provider is prone to a NULL character spoofing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Changetrack Local Privilege Escalation Vulnerability

This host has Changetrack installed and is prone to Local Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodchangetrackprivescalationvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Changetrack Local Privilege Escalation Vulnerability Authors: Sharath S Copyright: Copyright c...

GeoServer Memory Corruption Vulnerability

This host is installed with GeoServer and is prone to Memory Corruption vulnerability. OpenVAS Vulnerability Test $Id: secpodgeoservermemcorrvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ GeoServer Memory Corruption Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

Microsoft IIS FTP Server 'ls' Command DOS Vulnerability

The host is running Microsoft IIS with FTP server and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiisftpdlsdosvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Microsoft IIS FTP Server 'ls' Command DOS Vulnerability Authors: Nikita MR Copyright: Copyright c 200...

WinRAR Multiple Unspecified Vulnerabilities

This host has WinRAR installed and is prone to Multiple Vulnerability. OpenVAS Vulnerability Test $Id: secpodwinrarmultvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ WinRAR Multiple Unspecified Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod http://www.secpod.com This progra...

2532|Gigs Directory Traversal And SQL Injection Multiple Vulnerabilities

This host is running 2532-Gigs and is prone to Directory Traversal and SQL Injection Vulnerabilities. OpenVAS Vulnerability Test $Id: gb2532gigsmultvulnaug09.nasl 4865 2016-12-28 16:16:43Z teissa $ 2532|Gigs Directory Traversal And SQL Injection Multiple Vulnerabilities Authors: Antu Sanadi...

Soulseek 157 NS SEH Overwrite

Soulseek 157 NS 13e & 156. Remote Peer Search Code Execution ============================================= - Release date: July 02, 2009 - Discovered by: Laurent Gaffié ; http://g-laurent.blogspot.com/ - Severity: critical ============================================= I. VULNERABILITY...

Adobe Shockwave Player Remote Code Execution Vulnerability

This host has Adobe Shockwave Player installed and is prone to Remote Code Execution vulnerability. OpenVAS Vulnerability Test $Id: secpodadobeshockwaveplayercodeexecvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Adobe Shockwave Player Remote Code Execution Vulnerability Authors: Nikita MR Copyrigh...

Tiki Wiki CMS Groupware < 2.4 Multiple XSS Vulnerabilities

Tiki Wiki CMS Groupware is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...