The remote host is running sysinfo, a perl CGI script that administrators use to monitor servers.  Sysinfo gives potential attackers information regarding system configuration.  In addition, many versions of sysinfo are vulnerable to many different flaws.

The remote host is running the GNU mailman application.  It is running a version of Mailman prior to 2.1.8.  These versions of Mailman are prone to several remote attacks that may impact confidentiality and integrity.

The remote web server contains a PHP script that is prone to an authentication bypass vulnerability.  The remote host is running BASE, a web-based tool for analyzing alerts from one or more SNORT sensors.  The version of BASE installed on the remote host allows a remote attacker to bypass authentication to the 'base_maintenance.php' script and then perform selected maintenance tasks.

The remote server is running the Virtual War Gaming Server.  This application is used to manage game events and profiles. 

The remote host is running MercuryBoard, a web-based Message board
written in PHP.

This version of MercuryBoard is vulnerable to a Cross-Site Scripting (XSS)
attack

An attacker exploiting this flaw would need to be able to convince
an unsuspecting user to visit a malicious website. Upon
successful exploitation, the attacker would be able to possibly
steal credentials or execute browser-side code.

In addition, the remote host is vulnerable to a SQL Injection attack.  An attacker exploiting this flaw would be able to read data, modify data, or execute commands.

The remote host is running BiTBOARD, a web based bulletin board written in PHP. There is a JavaScript injection vulnerability in the remote version of this software that may allow an attacker to steal user's cookie to gain unauthorized access.

The remote host is running GNU Mailman, a web based software to manage mailing lists. There are multiple flaws such as information disclosure and cross-site scripting in the remote version of this software that may allow an attacker to steal user cookies to gain unauthorized access. 

The remote host is VideoDB, a web based video database manager written in PHP.
The remote version of this software is vulnerable to a SQL injection vulnerability due to a lack of filtering on user-supplied input. An attacker may exploit this flaw to modify the remote database.
This software may be vulnerable to an unauthorized access vulnerability in the file 'edit.php' that may allow an attacker to edit database entries.

The remote host is running PHPWind Board, a web based bulletin board. There is a remote file inclusion vulnerability in older versions of this software that may allow an attacker to gain a shell on this host.

 The remote host is running WebAPP, an open-source web portal application written in perl. There is a flaw in the remote version of this software that may allow an attacker to read arbitrary files on the remote host with the privileges of the web server process (httpd or root).

The remote host is running eGroupWare, a web-based groupware solution. It is reported that versions prior 1.0.0.004 are prone to a cross-site scripting issue. An attacker may steal cookie-based authentication credentials from a legitimate user by sending malformed links to this web site.

The remote host is running a version of PHP-Fusion that is prone to an information disclosure issue. In versions prior to 4.01, an attacker may download an entire backup of the web site database if he can guess the name of the backup file.

The remote host is running wwsympa.fcgi, a web interface for the Sympa mailing list manager. It is reported that this version of Sympa may permit an attacker to inject malicious HTML in "List Info" page through the description field of the list creation form. This field is not sanitized properly by the CGI.

The remote host is running wwsympa.fcgi, a web interface for the Sympa mailing list manager. It is reported that this version of Sympa may permit an attacker to bypass the list master authentication in order to create unauthorized mailing list. 

The remote host seems to be running a vulnerable version of Mantis, a bug tracker web application written in PHP. It is reported that versions up to 0.18.0 and 0.19.0a1 are prone to multiple flaws that may allow a remote attacker to inject malicious HTML in webpages, to execute arbitrary code on the remote host or to perform a mass mailing.

The remote host is running NetPleasure's Instaboard, a web-interface designed to manage online forums. There is a vulnerability in this release which allows an attacker to perform a SQL injection attack through the CGI 'index.cfm'. 

The remote host is running SuperGuestBook, a set of PHP scripts designed to manage an interactive guestbook. There is a flaw in this version which may allow an attacker to retrieve the configuration file of this setup, which contains the password of the administrator.

The remote host is running Ocean12 Guestbook, a set of scripts designed to manage an on-line guestbook. There is a flaw in this program which may be abused by attackers to inject malicious HTML code in the remote site, which may be used to steal the cookies of legitimate users.

eZ Publish (a content management system) is installed on the remote host. An attacker may retrieve the file 'settings/site.ini' and gather interesting information about the remote host.

 There is a SQL injection vulnerability in this installation which allows an attacker to gain the privileges of the administrator while logging in, or to take the control of the remote database.

The remote host is running readfile.tcl on Nokia IPSO Voyager WebGUI, which allows any user with a web account on this host to read arbitrary files on this system with the privileges of the HTTP server.

The remote host seems to be running OpenBB, a forum management system. There is a flaw in the remote version of OpenBB which allows an attacker to take the control of the database.

The remote server is running Bugzilla, a bug tracking system. There is a flaw in the remote installation of Bugzilla that makes it vulnerable to cross-site scripting attacks and that may allow local attackers to escalate their privileges due to the use of insecure temporary file names.

The remote host is running CopperMine Gallery, a set of PHP scripts to handle galleries of pictures. There is a flaw in the version of Coppermine Gallery which is used by the remote host, which may allow an attacker to do a SQL injection attack, which would allow the viewing of arbitrary pictures or even to gain administrative access on this database.

The remote host is running Stockman Shopping Cart. There is a flaw in this software which may allow an attacker to execute arbitrary commands on this host.

The remote host is running a version of the CGI 'album.pl' which may allow an attacker to execute arbitrary commands on this host.

It is possible to gain administrative privileges on the remote TrueGallerie installation by requesting the URL '/admin.php?loggedin=1'. An attacker may use this flaw to edit the content of the remote web server.

The remote host is running 12Planet Chat Server over an unencrypted channel. An attacker who can sniff traffic on this network may use this configuration issue to obtain the password of the administrator of this site and use it to take control.

The remote host is running 12Planet Chat Server, a web based chat server written in Java. There is a flaw in this software that may allow an attacker to obtain the physical path of the installation of the remote server by sending a malformed request to this service.

The remote host is hosting a CGI which seems to disclose a physical path as one of its arguments. An attacker may use it to gain more information about the remote host. 

The remote host is running HappyMall, an e-commerce CGI suite. Some versions of this CGI are vulnerable to a flaw which may allow an attacker to execute arbitrary commands on this host.

The remote host is running IkonBoard, an on-line BBS system. There is a flaw in the version used which may allow an attacker to execute arbitrary commands on this host.

The remote host is using mod_survey, a perl add-on to manage online surveys. There is a flaw in the remote installation of mod_survey which makes it vulnerable to SQL injection attacks when a database backend is being used. An attacker may use this flaw to gain control of your database.

The remote host is running Horde and/or IMP with the test script available to anyone. An attacker may use these to gain valuable information about the remote host.

The remote host is using Snitz Forum 2000. This set of CGI is vulnerable to a SQL injection issue which may allow an attacker to execute arbitrary commands on this host.

The remote host is running MiniPortail, a set of PHP scripts designed to manage to web portal. There is a flaw in the remote version of miniPortail which may allow anyone to gain administrative privileges on this server.

Moodle is an open source web-based learning platform, licensed under the GNU General Public License (GPL). Traffic observed from this remote host indicates it is running a Moodle 3.x website.

ID	Name	Severity
3517	Sysinfo Detection	medium
3507	GNU Mailman < 2.1.8 Multiple Vulnerabilities	low
3501	BASE < 1.2.4 base_maintenance Authentication Bypass	medium
3500	Policy - Virtual War Gaming Server Detection (deprecated)	medium
2627	MercuryBoard < 1.1.3 Multiple Vulnerabilities	high
2524	BiTBOARD IMG BBCode Tag JavaScript XSS	low
2523	GNU Mailman Multiple Unspecified Remote Vulnerabilities	low
2522	VideoDB < 2.0.2 Multiple Vulnerabilities	high
2513	PHPWind Board < 2.0.2 faq.php Remote File Inclusion (deprecated)	high
2146	WebAPP < 0.9.9.2 index.cgi Directory Traversal Arbitrary File Access	medium
2132	eGroupWare < 1.0.0.004 Multiple XSS	low
2128	PHP-Fusion Database Backup Information Disclosure	medium
2119	Sympa < 4.1.3 List Creation Description Field XSS	low
2118	Sympa < 4.1.2 wwsympa.fcgi List Master Authentication Bypass	medium
2114	Mantis < 0.18.3 / 0.19.0a2 Multiple Vulnerabilities	medium
1565	Instaboard index.cfm SQL Injection	medium
1564	Super Guestbook superguestconfig Admin Password Disclosure	medium
1563	Ocean12 Guestbook XSS	low
1562	eZ Publish site.ini Configuration Disclosure	medium
1559	bttlxeForum login.asp < 2.0 Multiple SQL Injection	medium
1558	Nokia IPSO Voyager WebGUI readfile.tcl file Parameter Arbitrary File Access	medium
1557	OpenBB Multiple SQL Injection	medium
1555	Bugzilla XSS / Insecure Temporary File Names	medium
1553	Coppermine Gallery < 1.1 beta 3 SQL Injection (deprecated)	high
1551	StockMan Shopping Cart < 7.9 shop.plx Command Execution	high
1549	album.pl < 6.2 Remote Command Execution	medium
1548	TrueGalerie admin.php loggedin Parameter Admin Authentication Bypass	medium
1543	12Planet Chat Server ClearText Password Remote Disclosure (deprecated)	low
1542	12Planet Chat Server Path Disclosure	medium
1540	CGI Script Path Disclosure	info
1539	HappyMall normal_html.cgi Remote Command Execution	medium
1537	IkonBoard FUNC.pm lang Cookie Arbitrary Command Execution	high
1534	mod_survey < 3.0.14e / 3.0.15pre6 ENV tags SQL Injection	medium
1532	Horde and IMP Test Script Disclosure	medium
1530	Snitz Forums < 3.4.03 register.asp Email Parameter SQL Injection (deprecated)	high
1528	miniPortail admin.php Cookie Manipulation Admin Access	critical
9398	Moodle 3.x Version Detection	info

Detections

Analytics

CGI Family for Nessus Network Monitor

medium

low

medium

medium

high

low

low

high

high

medium

low

medium

low

medium

medium

medium

medium

low

medium

medium

medium

medium

medium

high

high

medium

medium

low

medium

info

medium

high

medium

medium

high

critical

info