CGI abuses Family for Nessus

IDNameSeverity
35787Zabbix Web Interface extlang[] Parameter Remote Code Execution
high
35786Zabbix Web Interface Detection
info
35765Coppermine Photo Gallery keysToSkip Parameter Overwrite
medium
35751Drupal Theme System Template Local File Inclusion
high
35750PHP < 5.2.9 Multiple Vulnerabilities
medium
35749Moodle Forum 'post.php' Unauthorized Post Deletion CSRF
medium
35661SquirrelMail HTTPS Session Cookie Secure Flag Weakness
medium
35657HP OpenView Network Node Manager webappmon.exe Command Injection (c01661610)
high
35656HP OpenView Network Node Manager ovlaunch.exe Information Disclosure (c01661610)
medium
35655TYPO3 'jumpUrl' Mechanism Information Disclosure
medium
35649Trend Micro InterScan Web Security Suite Default Credentials
high
35628Openfire < 3.6.3 Multiple Vulnerabilities
medium
35618Sun OpenSSO / Java System Access Manager Login Module User Account Enumeration Weakness
medium
35610Jaws language Parameter Multiple Local File Includes
high
35609SocialEngine Blog Plugin category_id Parameter SQL Injection
high
35600Meeting Room Booking System (MRBS) month.php area Parameter SQL Injection
high
35587phpSlash fields Parameter PHP Code Injection
high
35580Profense Web Application Firewall Default Credentials
high
35557OpenX fc.php MAX_type Parameter Traversal Local File Inclusion
high
35554Horde Horde_Image::factory driver Argument Local File Inclusion
high
35474gigCalendar Component for Joomla! 'gigcal_gigs_id' Parameter SQLi
medium
35435Eventing Component for Joomla! 'catid' Parameter SQLi
high
35402phpList <= 2.10.8 Variable Overwriting
high
35370WP-Forum Plugin for WordPress 'forum_feed.php' 'thread' Parameter SQL Injection
high
35363Oracle Secure Backup Administration Server login.php Arbitrary Command Injection
critical
35326XOOPS Multiple Scripts mydirname Parameter Arbitrary Command Injection
high
35321XStandard Lite Plugin for Joomla! X_CMS_LIBRARY_PATH Header Directory Traversal
medium
35278XOOPS xoopsConfig[language] Parameter Local File Inclusion (DSECRG-08-040)
medium
35273RoundCube Webmail bin/html2text.php Post Request Remote PHP Code Execution
high
35262Pligg evb/check_url.php url Parameter SQL Injection
medium
35261OneOrZero Helpdesk tinfo.php Arbitrary File Upload
high
35259phpList cline Parameter Array Remote File Inclusion
high
35224Barracuda Spam Firewall < 3.5.12.007 Multiple Vulnerabilities
medium
35109Live Chat Component for Joomla! 'last' Parameter Multiple SQLi
high
35105Sun Java System Identity Manager Default Credentials
high
35104Sun Java System Identity Manager Detection
info
35090Moodle 'filter/tex/texed.php' 'pathname' Parameter Remote Command Execution
medium
35067PHP < 5.2.8 Multiple Vulnerabilities
high
35060phpPgAdmin index.php _language Parameter Local File Inclusion
medium
35043PHP 5 < 5.2.7 Multiple Vulnerabilities
high
35041Oempro index.php FormValue_Email Parameter SQL Injection Authentication Bypass
high
35029Dell Remote Access Controller Default Password (calvin) for 'root' Account
critical
35008OraMon config/oramon.ini Information Disclosure
medium
34992CMS Made Simple admin/login.php cms_language Cookie Local File Inclusion
medium
34947Apache Struts 2 devMode Information Disclosure
medium
34946Apache Struts 2 < 2.0.12 / 2.1.3 Dispatcher Directory Traversal
high
34726PHPWebAdmin for hMailServer Multiple File Inclusions
medium
34725Openfire AuthCheck Authentication Bypass
high
34507Eaton Network Shutdown Module < 3.20 Authentication Bypass / Command Execution
critical
34448yappa-ng index.php album Parameter Local File Inclusion
medium