phpEventCalendar HTML injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: phpEventCalendar HTML injection Vulnerability discovery: Madelman madelman AT iname.com Date: 25/01/2005 Severity: Medium. Registered users can obtain other users cookies Summary: - -------- phpEventCalendar is a MySQL backed application that...

ISC BIND < 8.4.6 q_usedns Array Remote Overflow DoS

The remote bind server, according to its version number, has a buffer overflow involving the 'qusedns' buffer. An attacker may be able to leverage this issue to crash the affected service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid16260; scriptversion"1.23";...

Exponent CMS Multiple Script pathos_core_version Parameter Path Disclosure

The remote host is running Exponent, a web-based content management system implemented in PHP. Directly requesting several different pages reveals the absolute path where Exponent is installed. A remote attacker could use this information to mount further attacks. In addition, the installed versi...

STG Security Advisory: [SSA-20050120-22] JSBoard file disclosure vulnerability

STG Security Advisory: SSA-20050120-22 JSBoard file disclosure vulnerability. Revision 1.0 Date Published: 2005-01-20 KST Last Update: 2005-01-20 KST Disclosed by SSR Team [email protected] Summary ======== JSBoard is one of widely used web BBS applications in Korea. Because of an input...

GForge Multiple Script Traversal Arbitrary Directory Listing

The remote host is running GForge, a CVS repository browser written in PHP. The installed version fails to properly sanitize user-supplied data to the 'dir' URI parameter in the 'controller.php' script, or the 'dirname' parameter in the 'controlleroo.php' script. An attacker could exploit this fl...

JAWS index.php gadget Parameter Traversal Arbitrary File Access

The remote web server is running JAWS, a content management system written in PHP. Input to the 'gadget' parameter of index.php is not properly sanitized. A remote attacker could exploit this to read potentially sensitive data from the system. This information could also be used to mount further...

vBulletin includes/init.php Unspecified Vulnerability

According to its banner, the remote version of vBulletin is vulnerable to an unspecified issue. It is reported that versions 3.0.0 through to 3.0.4 are prone to a security flaw in 'includes/init.php'. Successful exploitation requires that PHP's 'registerglobals' setting be enabled. %NASLMINLEVEL...

BiTBOARD IMG BBCode Tag XSS

The remote host is running BiTBOARD, a web-based bulletin board written in PHP. The remote version of this software is affected by a cross-site scripting issue that may allow an attacker to steal the http cookies of the regular users of the remote site to gain unauthorized access to their account...

Macallan Mail Solution Web Interface Authentication Bypass

The remote host is running Macallan Mail Solution, a mail server POP,SMTP,HTTP for Windows. It is possible to bypass web authentication by using two slashes before the requested resource. According to the vendor, this cannot be used to perform administrative actions. %NASLMINLEVEL 70300 C Tenable...

MyBB member.php 'uid' Parameter SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the avatar upload system via the 'uid' parameter of the member.php script. If PHP's 'magicquotesgpc' setting is disabled, can exploit this issue to...

HylaFAX Remote Access Control Bypass

The remote host is running HylaFAX, a fax transmission software. It is reported that HylaFAX is prone to an access control bypass vulnerability. An attacker, exploiting this flaw, may be able to gain unauthorized access to the service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian DSA-622-1 : htmlheadline - insecure temporary files

Javier Fernandez-Sanguino Pena from the Debian Security Audit Project has discovered multiple insecure uses of temporary files that could lead to overwriting arbitrary files via a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

ZeroBoard < 4.1pl5 Multiple Remote Vulnerabilities

The remote host runs ZeroBoard, a web BBS application popular in Korea. The remote version of this software is vulnerable to cross-site scripting and remote script injection due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to execute...

e_Board index2.cgi message Parameter Traversal Arbitrary File Access

The remote host is running eBoard, a web-based bulletin board system written in Perl. The version of eBoard running on the remote web server has a directory traversal vulnerability in the 'message' parameter of 'index2.cgi'. A remote attacker could exploit this to read sensitive information from...

GLSA-200412-23 : Zwiki: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200412-23 Zwiki: XSS vulnerability Due to improper input validation, Zwiki can be exploited to perform cross-site scripting attacks. Impact : By enticing a user to read a specially crafted wiki entry, an attacker can execute...

ArGoSoft Mail Server Unspecified XSS

The remote host is running the ArGoSoft WebMail interface. There is a flaw in this interface that could allow an attacker to conduct cross-site scripting XSS attacks against users. No further details have been provided. Nessus solely relied on the banner of this service to issue this alert...

SIR GNUBoard Remote File Inclusion

It is possible to make the remote web server read arbitrary files by using the GNUBoard CGI suite which is installed. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security,...

PHP Live! directory/conf File Include Unspecified Issue

The remote host is running PHP Live! a live support system for websites. The remote version of this software contains an unspecified flaw that could allow an attacker to include a configuration file hosted on a third-party server. An attacker may exploit this flaw to execute arbitrary PHP code on...

Serendipity compat.php searchTerm Parameter XSS

The remote version of Serendipity is vulnerable to cross-site scripting attacks due to a lack of sanity checks on the 'searchTerm' parameter in the 'compat.php' script. With a specially crafted URL, an attacker can cause arbitrary code execution in a user's browser resulting in a loss of integrit...

MailCarrier < 3.0.1 SMTP EHLO Command Remote Overflow

The target is running at least one instance of MailCarrier in which the SMTP service suffers from a buffer overflow vulnerability. By sending an overly long EHLO command, a remote attacker can crash the SMTP service and execute arbitrary code on the target. This script was written by George A...