(PVS) Signatures - Tenable Network Security

Solution: Upgrade to YaBB SE 1.5.2 or higher.
CVE-2002-1176
XMB < 1.8 SP1 member.php SQL Injection
PVS ID: 1546 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:11587
Description: The remote host is running XMB Forum. There is flaw in the version this host is using
which may allow an attacker to perform a SQL injection attack against this host.
Solution: Upgrade to XMB 1.8 SP1 or higher.
CVE Not available
Sambar Cleartext Password Remote Disclosure
PVS ID: 1547 FAMILY: Web Servers RISK: LOW NESSUS ID:11585
Description: The remote Sambar server does not run on top of SSL, therefore passwords are transmitted
in cleartext over HTTP. An attacker who can sniff network traffic may use this flaw to gain
access on the web interface of this host.
Solution: No solution is known at this time.
CVE Not available
TrueGalerie admin.php loggedin Parameter Admin Authentication Bypass
PVS ID: 1548 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:11582
Description: It is possible to gain administrative privileges on the remote TrueGallerie installation by
requesting the URL '/admin.php?loggedin
Solution: Disable the option 'register_globals' in php.ini.
CVE-2003-1488
album.pl < 6.2 Remote Command Execution
PVS ID: 1549 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:11581
Description: The remote host is running a version of the CGI 'album.pl' which may allow an attacker to
execute arbitrary commands on this host.
Solution: Upgrade to version 6.2 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 398