PRTG Traffic Grapher Detection

PRTG Traffic Grapher, a web-based tool for displaying network usage data, is hosted on the remote web server. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid46856; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"PRTG Traffic Grapher Detection"...

MySQL Enterprise Monitor (MEM) Web Detection

MySQL Enterprise Monitor MEM, a distributed application for monitoring multiple MySQL servers, is hosted on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46815; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate",...

Wing FTP Server - Cross Site Scripting Vulnerability

Security Advisory: Wing FTP Server - Cross Site Scripting Vulnerability ======================================================== Discovered Date: May 31, 2010 System affected: Wing FTP Server for Windows, Version 3.5.0 and prior version Vulnerability Description: ================== Wing FTP serve...

ManageEngine ADManager Plus Detection

ADManager Plus, a web-based management and reporting application for Active Directory, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46785; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"ManageEngine ADManage...

ManageEngine ADAudit Plus Detection

ADAudit Plus, a web-based Active Directory change auditing software, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46788; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"ManageEngine ADAudit Plus Detection";...

HP Power Manager formExportDataLogs Directory Traversal (CVE-2009-4000)

HP Power Manager is a web-based application for managing a HP Uninterruptible Power System UPS. A directory traversal vulnerability has been reported in HP Power Manager. The vulnerability is due to an input validation error while processing parameters sent to a certain form of the web based...

NolaPro Detection

The remote web server hosts NolaPro, a web-based business management application written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46703; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"NolaPro Detection";...

Specialized Data Systems (SDS) SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vendor : Specialized Data Systems SDS Product : Parent Connect Version : 2010.04.11 tested, all versions presumed vulnerable URL : http://www.schooloffice.com/newweb/Items.aspx?catId=c22 Description from vendor website: "SDS ... brings to your...

SDS Parent Connect SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vendor : Specialized Data Systems SDS Product : Parent Connect Version : 2010.04.11 tested, all versions presumed vulnerable URL : http://www.schooloffice.com/newweb/Items.aspx?catId=c22 Description from vendor website: "SDS ... brings to your...

McAfee Email Gateway 6.7.1 - systemWebAdminConfig.do Remote Security Bypass

McAfee Email Gateway 6.7.1 - systemWebAdminConfig.do Remote Security Bypass source: https://www.securityfocus.com/bid/40255/info McAfee Email Gateway is prone to a security-bypass vulnerability because the web-based interface fails to properly perform user-profile checks. Attackers can exploit th...

McAfee Email Gateway 6.7.1 - 'systemWebAdminConfig.do' Remote Security Bypass

source: https://www.securityfocus.com/bid/40255/info McAfee Email Gateway is prone to a security-bypass vulnerability because the web-based interface fails to properly perform user-profile checks. Attackers can exploit this issue to bypass certain security restrictions to edit property and...

Debian DSA-2046-1 : phpgroupware - several vulnerabilities

Several remote vulnerabilities have been discovered in phpgroupware, a Web-based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0403 A local file inclusion vulnerability allows remote attackers to execute arbitrary...

Preemptive Protection against Adobe ColdFusion Multiple Cross-Site Scripting Vulnerabilities (APSB10-11)

Multiple cross-site scripting XSS vulnerabilities have been discovered in Adobe ColdFusion server. Adobe ColdFusion is an application server for developing dynamically generated Web sites. Cross-site scripting occurs when a Web-based application fails to validate user input before returning it to...

NolaPro Enterprise 4.0.5538 Cross Site Scripting / SQL Injection

Advisory : CORELAN-10-035 Disclosure date : May 1st, 2010 http://www.corelan.be:8800/advisories.php?id=CORELAN-10-035 00 : Vulnerability information Product : NolaPro Enterprise Version : 4.0.5538 Vendor : Noguska LLC URL : http://www.nolapro.com Platform : Windows PHP/MySQL Type of vulnerabiliti...

Joomla Component com_jesectionfinder Upload Vulnerability

Exploit for php platform in category web applications ======================================================== Joomla JE Property Finder Component Upload Vulnerability ========================================================...

Joomla! Component com_jesectionfinder - Arbitrary File Upload

Joomla! Component comjesectionfinder - Arbitrary File Upload -------------------------------------------------------------------------------------- Sid3^effects aKa HaRi Greetz to all Andhra Hackers and ICW MemebersIndian Cyber Warriors Thanks:L0rd ÇrusAdêr,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|...

Joomla! Component com_jesectionfinder - Arbitrary File Upload

-------------------------------------------------------------------------------------- Sid3^effects aKa HaRi Greetz to all Andhra Hackers and ICW MemebersIndian Cyber Warriors Thanks:L0rd ÇrusAdêr,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C| 008,M4n0j,MaYuR ShouTZ:kedar,dec0d3r Catch us at...

Atlassian JIRA Detection

Atlassian JIRA, a web-based issue tracker written in Java, is running on the remote host. TRUSTED...

Serious New Java Flaw Affects All Current Versions of Windows

There is a serious vulnerability in Java that leaves users running any of the current versions of Windows open to simple Web-based attacks that could lead to a complete compromise of the affected system. Two separate researchers released information on the vulnerability on Friday, saying that it...

JVN#14313132 Cisco Router and Security Device Manager vulnerable to cross-site scripting

Cisco Router and Security Device Manager SDM is a web-based device management tool for Cisco routers. Cisco Router and Security Device Manager SDM contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Upda...