(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote web server contains a PHP script that is prone to a SQL injection
attack.\n\nThe version of Burning Board / Burning Board Lite on the remote host fails to
sanitize user input to the 'boardids' parameter of the 'search.php' script before using it in
database queries. Regardless of PHP's 'register_globals' and 'magic_quotes_gpc' settings, an
unauthenticated remote attacker can leverage this issue to launch SQL injection attacks
against the affected application, including discovery of password hashes of users of the
application.
Solution: No solution is known at this time.
BitDefender Detection
CVE-2007-1518
PVS ID: 3889 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has an antivirus software package installed on it.\n\nThe
remote host is running BitDefender, a commercial antivirus software package for Windows.
Solution: N/A
CVE Not available
WordPress < 2.1 Pingback Information Disclosure
PVS ID: 3890 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:24237
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe version of
WordPress installed on the remote host fails to sanitize the 'sourceURI' before passing it to
the 'wp_remote_fopen()' function when processing pingbacks. An unauthenticated remote
attacker can leverage this issue to determine the existence of local files and possibly even to
view parts of those files, subject to the permissions of the web server user ID. In addition,
the version is also reportedly susceptible to a denial of service attack because it allows an
anonymous attacker to cause a server to fetch arbitrary URLs without limits. The path to
the WordPress application is:\n%P
Solution: Upgrade to version 2.1 or higher.
CVE Not available
Symantec Antivirus Version Number Detection
PVS ID: 3891 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: The remote host is running Symantec Antivirus.
Solution: Ensure that you are running the latest version of Symantec Antivirus.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1007