Boonex 2.0 Dolphin - index.php Remote File Inclusion

Boonex 2.0 Dolphin - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/21182/info Dolphin is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have malicious PHP code execute in the...

PHP Upload Tool 1.0 - Arbitrary File Upload / Directory Traversal

source: https://www.securityfocus.com/bid/21150/info PHP Upload Tool is prone to an arbitrary file-upload vulnerability and a directory-traversal vulnerability. These issues occur because the application fails to sanitize user-supplied data. An attacker could exploit these issues to execute code ...

PHP Upload Tool 1.0 - Arbitrary File Upload Directory Traversal

PHP Upload Tool 1.0 - Arbitrary File Upload Directory Traversal source: https://www.securityfocus.com/bid/21150/info PHP Upload Tool is prone to an arbitrary file-upload vulnerability and a directory-traversal vulnerability. These issues occur because the application fails to sanitize user-suppli...

Kerio WebSTAR 5.4.2 (OSX) - libucache.dylib Local Privilege Escalation

Kerio WebSTAR 5.4.2 OSX - libucache.dylib Local Privilege Escalation !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach...

Conxint FTP 2.2.603 - Multiple Directory Traversal Vulnerabilities

Conxint FTP 2.2.603 - Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/21081/info Conxint is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a...

Conxint FTP 2.2.603 - Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/21081/info Conxint is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to access any file on the affected webserver. Versio...

Speedywiki 2.02.1 - Multiple Input Validation Vulnerabilities

Speedywiki 2.02.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/20976/info Speedywiki is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include an arbitrary...

Speedywiki 2.0/2.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/20976/info Speedywiki is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include an arbitrary file-upload vulnerability and a cross-site scripting vulnerability. A...

Solaris 2.6 (sparc) : 106754-01

The remote host is missing Sun Security Patch number 106754-01 Sun WebServer 1.0: Security and Performance Patch. Date this patch was last updated by Sun : Wed Dec 06 05:51:19 MST 2000 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script ha...

Zend平台多个远程漏洞

Zend Platform是企业级PHP应用的运行时平台环境。 Zend平台所捆绑的会话集群系统中存在多个漏洞，可能导致会话集群守护程序崩溃，会话函数无法工作，被攻击的节点拒绝服务。如果创建了特制的会话ID的话，攻击者还可以在会话集群守护程序的环境中或modcluster模块中执行任意代码。...

Solaris 2.5.1 (sparc) : 105710-01

The remote host is missing Sun Security Patch number 105710-01 Sun WebServer 1.0: Security and Performance international Patch. Date this patch was last updated by Sun : Wed Dec 09 17:00:00 MST 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@...

Solaris 2.5.1 (sparc) : 106755-01

The remote host is missing Sun Security Patch number 106755-01 Sun WebServer 1.0: Security and Preformance international Patch. Date this patch was last updated by Sun : Wed Dec 09 17:00:00 MST 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@...

Solaris 6 (sparc) : 116505-01

Sun Management Center 3.0: GA Webserver Patch for Solaris 2.6. Date this patch was last updated by Sun : Apr/06/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 2.5.1 (sparc) : 106754-01

The remote host is missing Sun Security Patch number 106754-01 Sun WebServer 1.0: Security and Performance Patch. Date this patch was last updated by Sun : Wed Dec 06 05:51:19 MST 2000 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script ha...

Solaris 2.6 (sparc) : 105710-01

The remote host is missing Sun Security Patch number 105710-01 Sun WebServer 1.0: Security and Performance international Patch. Date this patch was last updated by Sun : Wed Dec 09 17:00:00 MST 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@...

Solaris 2.6 (sparc) : 106755-01

The remote host is missing Sun Security Patch number 106755-01 Sun WebServer 1.0: Security and Preformance international Patch. Date this patch was last updated by Sun : Wed Dec 09 17:00:00 MST 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@...

MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues

MajorSecurity Advisory 31Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues Details ======= Product: xenis.creator CMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.xenis.cc Vendor-Status: informed Advisory-Status: published Credits ============ Discovered...

Advanced Guestbook 2.3.1 - 'admin.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20902/info Advanced GuestBook for phpBB is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP...

Advanced Guestbook 2.3.1 - admin.php Remote File Inclusion

Advanced Guestbook 2.3.1 - admin.php Remote File Inclusion source: https://www.securityfocus.com/bid/20902/info Advanced GuestBook for phpBB is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue t...

RunCMS 1.x - Avatar Arbitrary File Upload

RunCMS 1.x - Avatar Arbitrary File Upload source: https://www.securityfocus.com/bid/20874/info RunCMS is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process...