Microsoft IIS UNC Mapped Virtual Host Vulnerability

Your IIS webserver allows the retrieval of ASP/HTR source code. An attacker can use this vulnerability to see how your pages interact and find holes in them to exploit. OpenVAS Vulnerability Test $Id: iisuncmappedvirthostvuln.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: Microsoft IIS UNC...

Xedus Denial of Service

The remote host runs Xedus Peer to Peer webserver. This version is vulnerable to a denial of service. An attacker could stop the webserver accepting requests from users by establishing multiple connections from the same host. OpenVAS Vulnerability Test $Id: xedusdos.nasl 6056 2017-05-02 09:02:50Z...

Keene digital media server XSS

The remote host runs Keene digital media server, a webserver used to share digital information. This version is vulnerable to multiple cross-site scripting attacks which may allow an attacker to steal the cookies of users of this site. OpenVAS Vulnerability Test $Id: keenexss.nasl 6053 2017-05-01...

CSNews.cgi vulnerability

The CSNews.cgi exists on this webserver. Some versions of this file are vulnerable to remote exploit. An attacker may make use of this file to gain access to confidential data or escalate their privileges on the Web server. OpenVAS Vulnerability Test $Id: csnews.nasl 7175 2017-09-18 11:55:15Z...

Xedus directory traversal

The remote host runs Xedus Peer to Peer webserver. This version is vulnerable to directory traversal. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

VsSetCookie.exe Remote Vulnerability

The file VsSetCookie.exe exists on this webserver. Some versions of this file are vulnerable to remote exploit. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

Microsoft IIS Dangerous Default Files - Active Check

The file viewcode.asp is a default IIS files which can give a malicious user a lot of unnecessary information about your file system or source files. Specifically, viewcode.asp can allow a remote user to potentially read any file on a webserver hard drive. Example:...

bizdb1-search.cgi located

One of the BizDB scripts, bizdb-search.cgi, passes a variable SPDX-FileCopyrightText: 2000 Roelof Temmingh Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sambar /sysadmin Vulnerability

The Sambar webserver a web interface for configuration purposes. The admin user has no password and there are some other default users without passwords. Everyone could set the HTTP-Root to c:\ and delete existing files. SPDX-FileCopyrightText: 2000 Hendrik Scholz Some text descriptions might be...

Jigsaw webserver MS/DOS device DoS

It was possible to crash the Jigsaw web server by requesting /servlet/con about 30 times. A cracker may use this attack to make this service crash continuously. OpenVAS Vulnerability Test $Id: jigsawmsdosdevDoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Jigsaw webserver MS/DOS device Do...

File Disclosure in osCommerce

There is a vulnerability in the osCommerce's File Manager that allows an attacker to retrieve arbitrary files from the webserver that reside outside the bounding HTML root directory. OpenVAS Vulnerability Test $Id: oscommercefilemanagerdisclosure.nasl 6053 2017-05-01 09:02:51Z teissa $ Descriptio...

Xedus XSS

The remote host runs Xedus Peer to Peer webserver. This version is vulnerable to cross-site scripting attacks. With a specially crafted URL, an attacker can cause arbitrary code execution resulting in a loss of integrity. OpenVAS Vulnerability Test $Id: xedusxss.nasl 9087 2018-03-12 17:24:24Z...

MiniShare webserver buffer overflow

MiniShare 1.4.1 and prior versions are affected by a buffer overflow flaw. A remote attacker could execute arbitrary commands by sending a specially crafted file name in a the GET request. Version 1.3.4 and below do not seem to be vulnerable. OpenVAS Vulnerability Test $Id: minishareoverflow.nasl...

Raptor FW version 6.5 detection

By sending an invalid HTTP request to an webserver behind Raptor firewall, the http proxy itself will respond. The server banner of Raptor FW version 6.5 is always 'Simple, Secure Web Server 1.1' You should avoid giving an attacker such information. OpenVAS Vulnerability Test $Id: raptordetect.na...

Jigsaw webserver MS/DOS device DoS

It was possible to crash the Jigsaw web server by requesting /servlet/con about 30 times. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MiniShare webserver buffer overflow

MiniShare 1.4.1 and prior versions are affected by a buffer overflow flaw. SPDX-FileCopyrightText: 2005 SensePost Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

bizdb1-search.cgi located

BizDB is a web database integration product using Perl CGI scripts. One of the scripts, bizdb-search.cgi, passes a variable's contents to an unchecked open call and can therefore be made to execute commands at the privilege level of the webserver. The variable is dbname, and if passed a semicolon...

ddicgi.exe vulnerability

The file ddicgi.exe exists on this webserver. Some versions of this file are vulnerable to remote exploit. An attacker may use this file to gain access to confidential data or escalate their privileges on the Web server. OpenVAS Vulnerability Test $Id: ddicgi.nasl 8023 2017-12-07 08:36:26Z teissa...

Webserver 4D Cleartext Passwords

The remote host is running Webserver 4D 3.6 or lower. Version 3.6 of this service stores all usernames and passwords in cleartext. File: C:\Program Files\MDG\Web Server 4D 3.6.0\Ws4d.4DD A local attacker may use this flaw to gain unauthorized privileges on this host. OpenVAS Vulnerability Test $I...

Snitz Forums 2000 SQL injection

The remote host is using Snitz Forum 2000 This version allow an attacker to execute stored procedures and non-interactive operating system commands on the system. The problem stems from the fact that the 'Email' variable in the register.asp module fails to properly validate and strip out maliciou...