(PVS) Signatures - Tenable Network Security

Description: The remote host was just observed sending the following .zip file. %L\nThe file was
sent as an email attachment. If the file is considered confidential, you should consult
your mail server logs for the sender and/or recipient.
Solution: N/A
CVE Not available
Ultimate PHP Board chat/login.php username Parameter Script Injection
PVS ID: 3872 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection attack.\n\nThe
remote host is running Ultimate PHP Board, a message board written in PHP.
Versions of Ultimate less than 2.0b2 are vulnerable to a flaw where remote
attackers can inject and execute script code. Code would be executed with the
privileges of the web server process. The root flaw is in the 'username' parameter of
the 'chat/login.php' script. After uploading the code, the attacker can execute via the
'chat/text.php' script. Successful exploitation results in the attacker impacting
confidentiality, integrity, and availability.
Solution: No solution is known at this time.
CVE-2006-6790
WordPress < 2.0.6 template.php file Parameter HTML Injection
PVS ID: 3873 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running WordPress, a web blog manager written in PHP. The remote version of this
software is reported to be vulnerable to a flaw where a remote attacker can inject malicious
script code into the 'file' parameter of the 'template.php' script. Successful exploitation
would result in script code being executed in the browsers of other WordPress clients. In
addition, the application is reported to be vulnerable to a SQL injection attack. An attacker
exploiting this attack vector would only need to send malformed requests to the WordPress
application. Successful exploitation would result in the attacker executing arbitrary SQL
statements on the database server utilized by WordPress. The path to the vulnerable
WordPress application is:\n%P
Solution: Upgrade to version 2.0.6 or higher.
CVE-2007-0107
phpBB < 2.0.22 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3874 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Family Internet Services 1002