PHP3 Physical Path Disclosure Vulnerability

PHP3 will reveal the physical path of the webroot when asked for a non-existent PHP3 file if it is incorrectly configured. Although printing errors to the output is useful for debugging applications, this feature should not be enabled on production servers. OpenVAS Vulnerability Test $Id:...

SilverStream directory listing

SilverStream directory listings are enabled. An attacker may use this problem to gain more knowledge on this server and possibly to get files you would want to hide. Reference : http://online.securityfocus.com/archive/101/144786 OpenVAS Vulnerability Test $Id: silverstreamdirlisting.nasl 8023...

Oracle XSQLServlet XSQLConfig.xml File

It is possible to read the contents of the XSQLConfig.xml file which contains sensitive information. OpenVAS Vulnerability Test $Id: oracle9iXSQLServletXSQLConfig.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Oracle XSQLServlet XSQLConfig.xml File Authors: Matt Moore Copyright: Copyright C...

Apache HTTP Server /server-info Accessible (HTTP)

Requesting the URI /server-info provides a comprehensive overview of the server configuration. SPDX-FileCopyrightText: 2005 StrongHoldNet SPDX-FileCopyrightText: New NASL / detection code since 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

DB4Web directory traversal

It is possible to read any file on your system through the DB4Web software. OpenVAS Vulnerability Test $Id: db4webdirtrav.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: DB4Web directory traversal Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is free software; y...

ReadDesign checker

This plugin checks for ReadDesign vulns on the remote web server. SPDX-FileCopyrightText: 2005 Net-Square Solutions Pvt Ltd. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

DefaultNav checker

This plugin checks for DefaultNav vulnerabilities on the remote web server See the references for more information. SPDX-FileCopyrightText: 2005 Net-Square Solutions Pvt Ltd. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

BookReview beta 1.0 Multiple Vulnerabilities - Active Check

BookReview is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Goollery < 0.04b Multiple XSS Vulnerabilities - Active Check

Goollery is prone to multiple cross-site-scripting XSS vulnerabilities eg. through the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

BasiliX SQL Injection Vulnerability

The remote web server contains PHP scripts that are prone to SQL injection attacks. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions are potentially vulnerable to SQL injection attacks depending on the version of PHP installed...

TinyWeb < 1.93 Multiple Vulnerabilities

TinyWeb is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 Matt North Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11894...

cgi.rb

The SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15710";...

phpAdsNew Multiple Vulnerabilities (Mar 2005) - Active Check

phpAdsNew is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nuked-klan <= 1.3b Multiple Vulnerabilities - Active Check

Nuked-klan is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 k-otik.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Horde IMP HTML MIME Viewer XSS Vulnerabilities

The target is running at least one instance of Horde IMP whose version number is between 3.0 and 3.2.5 inclusive. SPDX-FileCopyrightText: 2003-2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

directory.php

The SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11017";...

Oracle 9i Application Server PORTAL_DEMO ORG_CHART Accessible - Active Check

In installations of Oracle 9i Application Server AS, it is possible to access a demo PORTALDEMO.ORGCHART via modplsql. Access to these pages should be restricted, because it may be possible to abuse this demo for SQL injection attacks. SPDX-FileCopyrightText: 2003 Frank Berger Some text...

Horde Information Disclosure Vulnerability (Nov 2005) - Active Check

Horde is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2004 Sverre H. Huseby Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CuteNews index.php XSS

The remote web server contains a PHP script that is prone to cross-site scripting attacks. Description : The version of CuteNews installed on the remote host is vulnerable to a cross-site-scripting XSS attack. An attacker, exploiting this flaw, would need to be able to coerce a user to browse to ...

PGPMail.pl detection

The 'PGPMail.pl' CGI is installed. Some versions up to v1.31 a least of this CGI do not properly filter user input before using it inside commands. This would allow a cracker to run any command on your server. Note: OpenVAS just checked the presence of this CGI but did not try to exploit the flaw...