Pass PHPNews sendtofriend.php 'mid' Parameter SQLi CVE-2004-2474 30 Nov 2004 7.5 (v2) High Pass SSL Certificate Expiry 03 Dec 2004 5.3 (v3) Medium Pass Hydra: POP3 01 Dec 2004 7.5 (v2) High Pass Hydra: SOCKS5 01 Dec 2004 7.5 (v2) High Pass Hydra: SSH2 01 Dec 2004 10 (v2) Critical Pass Hydra: VNC 01 Dec 2004 10 (v2) Critical Pass Hydra: NNTP 01 Dec 2004 7.5 (v2) High Pass Apache on Mac OS X HFS+ Arbitrary File Source Disclosure CVE-2004-1083 CVE-2004-1084 09 Dec 2004 5 (v2) Medium Pass OpenText FirstClass HTTP Daemon /Search Large Request Remote DoS CVE-2004-2496 11 Dec 2004 7.8 (v2) High Pass PunBB Search Dropdown Private Forum Disclosure 13 Dec 2004 5 (v2) Medium Pass F-Secure Policy Manager Path Disclosure CVE-2004-1223 10 Dec 2004 5 (v2) Medium Pass PunBB profile.php XSS 13 Dec 2004 4.3 (v2) Medium Pass OpenSSL 1.0.1 < 1.0.1q Multiple DoS CVE-2015-3194 CVE-2015-3195 07 Dec 2015 5.3 (v3) Medium Pass SugarSales Multiple Module Traversal Arbitrary File Access 13 Dec 2004 5 (v2) Medium Pass UseModWiki wiki.pl XSS CVE-2004-1397 14 Dec 2004 4.3 (v2) Medium Pass ASP-Rider verify.asp username Parameter SQL Injection CVE-2004-1401 14 Dec 2004 7.5 (v2) High Pass PunBB < 1.1.2 install.php XSS 13 Dec 2004 4.3 (v2) Medium Pass Serendipity compat.php searchTerm Parameter XSS CVE-2004-2525 06 Dec 2004 4.3 (v2) Medium Pass Samba smbd Security Descriptor Parsing Remote Overflow CVE-2004-1154 16 Dec 2004 10 (v2) Critical Pass phpGroupWare Detection 16 Dec 2004 None Pass Ikonboard ikonboard.cgi Multiple Parameter SQL Injection CVE-2004-1406 16 Dec 2004 7.5 (v2) High Pass Singapore Gallery < 0.9.11 Multiple Vulnerabilities CVE-2004-1407 CVE-2004-1408 CVE-2004-1409 16 Dec 2004 6.5 (v2) Medium Pass ArGoSoft Mail Server Unspecified XSS 20 Dec 2004 5.8 (v2) Medium Pass Brightmail AntiSpam bmagent Multiple Remote Vulnerabilities (DoS, Traversal) CVE-2006-4013 CVE-2006-4014 04 Aug 2006 7.6 (v2) High Pass ViewCVS < 1.0.0 Multiple Vulnerabilities CVE-2004-1062 CVE-2005-4830 CVE-2005-4831 28 Dec 2004 4.3 (v2) Medium Pass Owl < 0.74.0 Multiple Vulnerabilities CVE-2005-0264 CVE-2005-0265 28 Dec 2004 7.5 (v2) High Pass SHOUTcast Server Filename Handling Format String CVE-2004-1373 28 Dec 2004 7.5 (v2) High Pass WU-FTPD wu_fnmatch() Function File Globbing Remote DoS CVE-2005-0256 23 Mar 2005 7.8 (v2) High Pass ISC BIND < 8.4.6 q_usedns Array Remote Overflow DoS CVE-2005-0033 26 Jan 2005 5 (v2) Medium Pass Squid NTLM Component fakeauth Multiple Remote DoS CVE-2005-0096 CVE-2005-0097 13 Jan 2005 5.3 (v3) Medium Pass Macallan Mail Solution Web Interface Authentication Bypass 13 Jan 2005 5 (v2) Medium Pass IlohaMail Configuration Scripts Remote Disclosure 13 Jan 2005 5 (v2) Medium Pass Invision Community Blog Module eid Parameter SQL Injection CVE-2005-0217 13 Jan 2005 7.5 (v2) High Pass Symantec Web Security (SWS) Multiple Vulnerabilities CVE-2007-0563 CVE-2007-0564 07 Jun 2007 4.3 (v2) Medium Pass IlohaMail Multiple Configuration Files Remote Information Disclosure 12 Jan 2005 5 (v2) Medium Pass Novell GroupWise WebAccess WebAccessUninstall.ini Information Disclosure 15 Jan 2005 5 (v2) Medium Pass Default Password (zebra) for Zebra 19 Jan 2005 10 (v2) Critical Pass SiteMinder smpwservicescgi.exe Arbitrary Site Redirect 17 Jan 2005 4.7 (v3) Medium Pass Novell GroupWise WebAccess Error Handler Authentication Bypass CVE-2005-0296 17 Jan 2005 5 (v2) Medium Pass BiTBOARD IMG BBCode Tag XSS CVE-2005-0374 18 Jan 2005 3.5 (v2) Low Pass ITA Forum Multiple Scripts SQL Injection 18 Jan 2005 7.5 (v2) High Pass pLog register.php Multiple Parameter XSS 19 Jan 2005 4.3 (v2) Medium Pass Chipmunk Forum Multiple SQL Injections 08 Feb 2005 7.5 (v2) High Pass JAWS index.php gadget Parameter Traversal Arbitrary File Access CVE-2004-2445 18 Jan 2005 5 (v2) Medium Pass FKey Arbitrary Remote File Disclosure 21 Jan 2005 5 (v2) Medium Pass Citadel/UX select() Bitmap Array Index Remote Oerflow 25 Jan 2005 10 (v2) Critical Pass VERITAS Backup Exec Agent Browser Registration Request Remote Overflow CVE-2004-1172 24 Jan 2005 10 (v2) Critical Pass ExBB Netsted BBcode XSS 20 Jan 2005 3.5 (v2) Low Pass Exponent CMS Multiple Script pathos_core_version Parameter Path Disclosure CVE-2005-0310 25 Jan 2005 5 (v2) Medium Pass WebWasher Classic Server Mode Arbitrary Proxy CONNECT Request CVE-2005-0316 31 Jan 2005 7.5 (v2) High Pass CoolForum Multiple SQL Injections 29 Jan 2005 7.5 (v2) High Pass ht://Dig htsearch.cgi config Parameter XSS CVE-2005-0085 08 Feb 2005 4.3 (v2) Medium Pass ArGoSoft FTP Server < 1.4.2.8 Multiple .LNK File Handling Vulnerabilities CVE-2005-0519 CVE-2005-0520 09 Feb 2005 10 (v2) Critical Pass Sami HTTP Server Multiple Remote Vulnerabilities 16 Feb 2005 6.4 (v2) Medium Pass Mambo Site Server mos_change_template XSS CVE-2004-1825 07 Feb 2005 4.3 (v2) Medium Pass PerlDesk kb.cgi view Parameter SQL Injection CVE-2005-0343 08 Feb 2005 7.5 (v2) High Pass fingerd Remote Overflow 18 Feb 2005 10 (v2) Critical Pass HTTP Proxy CONNECT Loop DoS 20 Feb 2005 5 (v2) Medium Pass osCommerce contact_us.php enquiry Parameter XSS CVE-2005-0458 16 Feb 2005 4.3 (v2) Medium Pass Open WebMail openwebmail.pl logindomain Parameter XSS CVE-2005-0445 16 Feb 2005 4.3 (v2) Medium Pass MS11-004: Vulnerability in Internet Information Services (IIS) FTP Service Could Allow Remote Code Execution (2489256) (uncrCVE-2010-3972 edentialed check) 11 Feb 2011 9.8 (v3) Critical Pass Blazix Trailing Character JSP Source Disclosure CVE-2002-1451 19 Feb 2005 5 (v2) Medium Pass pMachine mail_autocheck.php Arbitrary Code Execution CVE-2005-0513 19 Feb 2005 7.3 (v3) High Pass News Server (NNTP) Anonymous Read / Write Access 23 Feb 2005 6.4 (v2) Medium Pass CA License Service Multiple Vulnerabilities CVE-2005-0581 CVE-2005-0582 CVE-2005-0583 10 Mar 2005 10 (v2) Critical Pass Tomcat Sample App cal2.jsp 'time' Parameter XSS CVE-2009-0781 09 Mar 2009 5.3 (v3) Medium Pass SocialEngine Blog Plugin category_id Parameter SQL Injection CVE-2009-0400 06 Feb 2009 7.5 (v2) High Pass RaidenHTTPD < 1.1.34 Multiple Remote Vulnerabilities 01 Mar 2005 10 (v2) Critical Pass PunBB < 1.2.2 Multiple Input Validation Vulnerabilities CVE-2005-0569 CVE-2005-0570 CVE-2005-0571 26 Feb 2005 7.5 (v2) High Pass Verity Ultraseek Search Request XSS CVE-2005-0514 28 Feb 2005 4.3 (v2) Medium Pass IDA Pro Disassembler Software Detection 03 Mar 2005 None Pass vBulletin Detection 07 Mar 2005 None Pass Stadtaus PHP Form Mail formmail.inc.php Remote File Inclusion CVE-2005-0678 07 Mar 2005 6.8 (v2) Medium Pass FCKeditor for PHP-Nuke Arbitrary File Upload CVE-2005-0613 01 Mar 2005 7.5 (v2) High Pass ESXi 5.1 < Build 3070626 Shared Folders (HGFS) Guest Privilege Escalation (VMSA-2016-0001) (remote check)CVE-2015-6933 15 Jan 2016 6.3 (v3) Medium Pass Nabopoll survey.inc.php path Parameter Remote File Inclusion CVE-2005-2157 05 Jul 2005 6.8 (v2) Medium Pass ZyXEL Routers Default Web Account CVE-2001-1135 CVE-1999-0571 10 Mar 2005 10 (v2) Critical Pass CopperExport XP_Publish.PHP SQL Injection Vulnerability CVE-2005-0697 10 Mar 2005 6.5 (v2) Medium Pass PlatinumFTPServer username Multiple Connection Handling Remote Format String CVE-2005-0779 14 Mar 2005 5 (v2) Medium Pass Fortinet FortiGate Web Console Management Detection 18 Mar 2005 None Pass Check Point Secure Platform Detection 21 Mar 2005 None Pass paBox pabox.php posticon Parameter XSS 16 Mar 2005 4.3 (v2) Medium Pass paFileDB <= 3.1 Multiple Vulnerabilities (2) CVE-2004-1219 CVE-2004-1551 CVE-2004-1975 CVE-2005-0326 CVE-2005-0327 CVE-2005-0723 CVE-2005-0724 CVE-2005-0781 CVE-2005-078215 Mar 2005 6.8 (v2) Medium Pass LSH lshd parse_kexinit() Function Malformed Key Exchange Message Remote DoS CVE-2005-0814 17 Mar 2005 5 (v2) Medium Pass NetWin SurgeMail Multiple Remote Unspecified Vulnerabilities CVE-2005-0845 CVE-2005-0846 22 Mar 2005 7.5 (v2) High Pass Cisco IOS Device TFTP Certificate Authority (CA) File Detection 16 Mar 2005 5 (v2) Medium Pass FileZilla FTP Server Multiple DoS CVE-2005-0850 CVE-2005-0851 22 Mar 2005 7.8 (v2) High Pass DeleGate < 8.11 Multiple Unspecified Overflows CVE-2005-0861 22 Mar 2005 10 (v2) Critical Pass NFX Series: Authentication Bypass Vulnerability Juniper Device Manager (JDM) (JSA10955) CVE-2019-0057 25 Oct 2019 7.8 (v3) High Pass Horde Parent Frame Page Title XSS CVE-2005-0961 30 Mar 2005 4.3 (v2) Medium Pass CPG Dragonfly Multiple XSS CVE-2005-0914 29 Mar 2005 4.3 (v2) Medium Pass Squirrelcart index.php Multiple Parameter SQL Injection CVE-2005-0962 30 Mar 2005 7.5 (v2) High Pass Apache mod_negotiation Multi-Line Filename Upload Vulnerabilities CVE-2008-0455 CVE-2008-0456 18 Nov 2011 5.3 (v3) Medium Pass Oracle HTTP Server (January 2006 CPU) CVE-2006-0286 CVE-2006-0287 21 Nov 2011 10 (v2) Critical Pass Apple iTunes < 8.2 itms: URI Handling Overflow (uncredentialed check) CVE-2009-0950 02 Jun 2009 9.3 (v2) High Pass Apache Mixed Platform AddType Directive Information Disclosure CVE-2007-6514 18 Nov 2011 5.6 (v3) Medium Pass OpenSSH < 1.2.2 sshd Local TCP Redirection Connection Masking Weakness CVE-2000-0143 18 Nov 2011 4.6 (v2) Medium Pass OpenSSH < 3.6.1p2 Multiple Vulnerabilities CVE-2002-0746 18 Nov 2011 7.2 (v2) High Pass Oracle 9i Application Server HTTP Request Smuggling CVE-2005-2093 18 Nov 2011 4.3 (v2) Medium Pass OpenSSL < 0.9.6b Predictable Random Generator CVE-2001-1141 04 Jan 2012 5 (v2) Medium Pass OpenSSH >= 2.3.0 AllowTcpForwarding Port Bouncing CVE-2004-1653 01 Dec 2011 6.4 (v2) Medium Pass OpenSSL < 0.9.6f Denial of Service CVE-2002-1568 04 Jan 2012 5 (v2) Medium Pass OpenSSL < 0.9.6k Denial of Service CVE-2003-0543 CVE-2003-0544 04 Jan 2012 5 (v2) Medium Pass OpenSSL < 0.9.6l Denial of Service CVE-2003-0851 04 Jan 2012 5 (v2) Medium Pass Cisco NX-OS DHCPv4 Crafted Packet DoS (cisco-sa-20161005-dhcp2) CVE-2015-6393 22 Nov 2016 7.5 (v3) High Pass OpenSSL < 0.9.7c ASN.1 Decoding Vulnerabilities CVE-2003-0543 CVE-2003-0544 CVE-2003-0545 04 Jan 2012 10 (v2) Critical Pass OpenSSL < 0.9.7k / 0.9.8c PKCS Padding RSA Signature Forgery Vulnerability CVE-2006-4339 04 Jan 2012 4.3 (v2) Medium Pass OpenSSL < 0.9.8 Weak Default Configuration CVE-2005-2946 04 Jan 2012 5 (v2) Medium Pass OpenSSL < 0.9.8f Multiple Vulnerabilities CVE-2007-3108 CVE-2007-4995 04 Jan 2012 9.3 (v2) High Pass OpenSSL < 0.9.7-beta3 Buffer Overflow CVE-2002-0657 04 Jan 2012 7.5 (v2) High Pass Simple Form Subject Tags Arbitrary Mail Relay 13 Sep 2004 5 (v2) Medium Pass OpenSSL < vA.00.09.07l on HP-UX Local Denial of Service CVE-2007-5536 04 Jan 2012 4.9 (v2) Medium 12
RELAYTO Penetration Test Results Page 11 Page 13