Pligg 1.0.4 SQL Injection

While beta testing the latest version of Acunetix WVS v7, we found a large number of security vulnerabilities in various web applications. In the following days we will publish some of these vulnerabilities. Note that we will not publish vulnerabilities found in applications that are not commonly...

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/42697/info Acunetix Web Vulnerability Scanner is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate...

Drupal Local File Inclusion

Hi guys, I was testing Acunetix WVS with AcuSensor enabled on Drupal http://www.drupal.org and the scanner found a possible File Inclusion vulnerability. The vulnerability is located in the file "includes\theme.inc" on line 1011. Vulnerable code: function themerendertemplate$templatefile,...

CVE-2007-0120

CVE-2007-0120 affects Acunetix Web Vulnerability Scanner (WVS) version 4.0 Build 20060717 and earlier. The vulnerability is a denial of service caused by remote attackers sending multiple HTTP requests with invalid Content-Length values, leading to an application crash. Public details in the conn...

Acunetix WVS <= 4.0 20060717 HTTP Sniffer Component Remote DoS

No description provided by source. !/usr/bin/perl -w Acunetix Web Vulnerability Scanner 4.0 = Build 20060717 HTTP Sniffer component Remote Denial of Service Explaination: I found a DoS in Acunetix WVS doing a little bit of fuzzing...