Pass OpenVAS Manager / Administrator Detection 02 Dec 2011 None Pass Apache OFBiz Detection 23 May 2012 None Pass TYPOlight < 2.2.5 Unspecified Vulnerability CVE-2007-1632 27 Mar 2007 7.5 (v2) High Pass Cisco UCS Director Log4j Remote Code Execution (cisco-sa-apache-log4j-qRuKNEbd) CVE-2021-44228 03 Jun 2022 10 (v3) Critical Pass XOOPS Articles Module print.php id Parameter SQL Injection CVE-2007-3311 27 Mar 2007 7.5 (v2) High Pass IBM Lotus Domino IMAP Server (nimap.exe) CRAM-MD5 Authentication Remote Overflow CVE-2007-1675 29 Mar 2007 10 (v2) Critical Pass PHP < 4.4.5 Multiple Vulnerabilities CVE-2006-4625 CVE-2007-0905 CVE-2007-0906 CVE-2007-0907 CVE-2007-0908 CVE-2007-0909 CVE-2007-0910 CVE-2007-0988 CVE-2007-1286 CVE-2007-1376 CVE-2007-1378 CVE-2007-1379 CVE-2007-1380 CVE-2007-1700 CVE-2007-1701 CVE-2007-1777 CVE-2007-1825 CVE-2007-1835 CVE-2007-1884 CVE-2007-1885 CVE-2007-1886 CVE-2007-1887 CVE-2007-189002 Apr 2007 7.5 (v2) High Pass Request Tracker Detection 04 Dec 2009 None Pass eclime login.php SQL Injection 16 Mar 2010 7.5 (v2) High Pass Ektron CMS400.NET Detection 30 Apr 2010 None Pass HAProxy Statistics Page Detection 29 Jun 2012 5 (v2) Medium Pass Ektron CMS400.net TransformXslt Web Service Directory Traversal 30 Apr 2010 4.3 (v2) Medium Pass Tenable PVS Proxy Detection 29 Apr 2010 None Pass Cacti Detection 04 May 2010 None Pass Pligg Detection 19 Jul 2010 None Pass MapServer Insecure MapServ CGI Command-line Debug Args CVE-2010-2540 27 Jul 2010 9.8 (v3) Critical Pass FuseTalk Detection 17 Aug 2010 None Pass Serv-U Version Detection 25 Aug 2010 None Pass PHP < 5.2.1 Multiple Vulnerabilities CVE-2006-6383 CVE-2007-0905 CVE-2007-0906 CVE-2007-0907 CVE-2007-0908 CVE-2007-0909 CVE-2007-0910 CVE-2007-0988 CVE-2007-1376 CVE-2007-1380 CVE-2007-1383 CVE-2007-1452 CVE-2007-1453 CVE-2007-1454 CVE-2007-1700 CVE-2007-1701 CVE-2007-1824 CVE-2007-1825 CVE-2007-1835 CVE-2007-1884 CVE-2007-1885 CVE-2007-1886 CVE-2007-1887 CVE-2007-1889 CVE-2007-1890 CVE-2007-4441 CVE-2007-458602 Apr 2007 7.5 (v2) High Pass Zenphoto Detection 20 Sep 2010 None Pass Mura CMS Detection 30 Sep 2010 None Pass Samba Web Administration Tool (SWAT) Detection 03 Mar 2000 None Pass Invision Power Board ibProArcade Module index.php cat Parameter SQL Injection CVE-2004-1536 22 Nov 2004 7.5 (v2) High Pass Invision Power Board sources/post.php qpid Parameter SQL Injection CVE-2004-1531 22 Nov 2004 7.5 (v2) High Pass Mambo Site Server Multiple Vulnerabilities CVE-2003-1204 07 Feb 2005 7.5 (v2) High Pass Sybase SQL sa Account Blank Password 21 Feb 2005 7.5 (v2) High Pass Mambo Detection 01 Apr 2005 None Pass Horde Turba Detection 26 Apr 2005 None Pass Claroline < 1.5.4 / 1.6.0 Multiple Vulnerabilities (RFI, SQLi, XSS, Traversal) CVE-2005-1374 CVE-2005-1375 CVE-2005-1376 CVE-2005-1377 29 Apr 2005 7.5 (v2) High Pass XOOPS WF-Section Module print.php articleid Parameter SQL Injection CVE-2007-1974 03 Apr 2007 7.5 (v2) High Pass MediaWiki Detection 20 Jul 2005 None Pass osCommerce Unprotected Admin Directory 21 Jul 2005 7.5 (v2) High Pass VERITAS NetBackup Volume Manager Detection 11 Nov 2005 None Pass Xaraya index.php module Parameter Traversal Arbitrary File/Directory Manipulation CVE-2005-3929 02 Jan 2006 5 (v2) Medium Pass Kerberos telnet Crafted Username Remote Authentication Bypass CVE-2007-0956 05 Apr 2007 8.8 (v3) High Pass Jenkins Enterprise and Operations Center < 2.277.43.0.3 / 2.319.1.5 Multiple Vulnerabilities (CloudBees Security Advisory 2021-12-01)CVE-2021-35517 CVE-2021-37714 16 Feb 2022 7.5 (v3) High Pass Apache Solr Unauthenticated Access Information Disclosure 16 Feb 2022 5.3 (v3) Medium Pass WebCalendar < 1.0.2 Multiple Vulnerabilities CVE-2005-3949 CVE-2005-3961 CVE-2005-3982 CVE-2005-3982 02 Dec 2005 7.5 (v2) High Pass Juniper Junos OS Vulnerability (JSA11286) CVE-2022-22180 12 Jan 2022 7.5 (v3) High Pass Juniper Junos OS Vulnerability (JSA11282) CVE-2022-22176 12 Jan 2022 6.5 (v3) Medium Pass Juniper Junos OS Vulnerability (JSA11275) CVE-2022-22168 12 Jan 2022 6.5 (v3) Medium Pass XOOPS Jobs Module index.php cid Parameter SQL Injection CVE-2007-2370 06 Apr 2007 7.5 (v2) High Pass WebSpeed Development Mode Check 26 Apr 2007 7.5 (v2) High Pass Juniper Junos OS Vulnerability (JSA11271) CVE-2022-22163 12 Jan 2022 6.5 (v3) Medium Pass Juniper Junos OS Vulnerability (JSA11268) CVE-2022-22160 12 Jan 2022 6.5 (v3) Medium Pass XOOPS xoopsConfig Parameter Variable Overwrite Local File Inclusion CVE-2006-2516 23 May 2006 5.1 (v2) Medium Pass Juniper Junos OS Multiple Vulnerabilities (JSA11289) CVE-2021-22876 CVE-2021-22890 CVE-2021-22897 CVE-2021-22898 CVE-2021-22901 12 Jan 2022 8.1 (v3) High Pass Advanced Guestbook index.php lang Cookie Parameter Path Disclosure CVE-2007-0609 09 May 2007 5.1 (v2) Medium Pass WoltLab Burning Board Lite wbb_userid Parameter PHP Unset SQL Injection CVE-2006-6289 27 Nov 2006 6.8 (v2) Medium Pass HP LoadRunner Agent Service Detection 13 Feb 2007 None Pass Thyme event_view.php eid Parameter SQL Injection CVE-2007-2621 11 May 2007 7.5 (v2) High Pass YaNC Component for Joomla! 'listid' Parameter SQLi CVE-2007-2792 17 May 2007 7.3 (v3) High Pass XOOPS XFSection Module modify.php dir_module Parameter Remote File Inclusion CVE-2007-3222 14 Jun 2007 7.5 (v2) High Pass WebSpeed Workshop Arbitrary Command Execution 26 Apr 2007 8.8 (v3) High Pass Apache Solr 5.x <= 5.5.5 or 6.x <= 6.6.5 Deserialization Vulnerability (CVE-2019-0192) CVE-2019-0192 03 Jul 2019 9.8 (v3) Critical Pass Advantech WebAccess webvprcs IOCTL 10012 Stack Overflow CVE-2019-3953 04 Jul 2019 9.8 (v3) Critical Pass Atlassian JIRA Server Template Injection Vulnerability (CVE-2019-11581) CVE-2019-11581 13 Sep 2019 9.8 (v3) Critical Pass OS Identification : ICMP 09 Dec 2003 None Pass Atlassian JIRA ConfigurePortalPages.jspa XSS CVE-2019-3402 13 Sep 2019 6.1 (v3) Medium Pass Tenable Nessus 8.x < 8.15.5 Thiird-Party Vulnerabilities (TNS-2022-12) CVE-2022-23852 CVE-2022-23990 CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315 27 May 2022 9.8 (v3) Critical Pass Atlassian Jira Webroot Directory Traversal Vulnerability CVE-2019-8442 25 Oct 2019 7.5 (v3) High Pass Tomcat Sample App hello.jsp 'test' Parameter XSS CVE-2007-1355 21 May 2007 5.3 (v3) Medium Pass Centennial IP Transfer Agent Detection 23 May 2007 None Pass Siemens SINEMA Remote Connect Server Multiple Vulnerabilities (SSA-884497) CVE-2019-13918 CVE-2019-13919 CVE-2019-13920 CVE-2019-13922 02 Dec 2019 9.8 (v3) Critical Pass Oracle WebLogic Server Java Object Deserialization RCE (CVE-2018-3245) CVE-2018-3245 03 May 2019 9.8 (v3) Critical Pass GForge CVSWeb CGI cvsweb.php PATH_INFO Parameter Arbitrary Command Execution CVE-2007-0246 26 May 2007 8.8 (v3) High Pass ShareFile Storage Zones Controller Installed (Windows) 02 Jun 2020 None Pass Rockwell Automation FactoryTalk Linx Path Traversal Information Disclosure CVE-2020-12003 08 Oct 2020 7.5 (v3) High Pass UebiMiau Multiple Input Validation Vulnerabilities CVE-2007-3170 CVE-2007-3171 CVE-2007-3172 30 May 2007 5 (v2) Medium Pass Microsoft Netlogon Elevation of Privilege (Zerologon) (Remote) CVE-2020-1472 18 Sep 2020 10 (v3) Critical Pass OpenWrt < 18.06.2 XSS (direct check) CVE-2018-19630 04 Dec 2020 6.1 (v3) Medium Pass Apache Unomi RCE (Direct Check) CVE-2020-13942 14 Jan 2021 9.8 (v3) Critical Pass ManageEngine OpManager Smart Update Manager RCE CVE-2020-28653 02 Apr 2021 9.8 (v3) Critical Pass Trend Micro Worry-Free Business Security Remote File Deletion (000281948) CVE-2020-28574 12 Apr 2021 7.5 (v3) High Pass Juniper Junos OS Vulnerability (JSA11263) CVE-2022-22155 12 Jan 2022 6.5 (v3) Medium Pass Juniper Junos OS Vulnerability (JSA11267) CVE-2022-22159 12 Jan 2022 7.5 (v3) High Pass Juniper Junos OS Vulnerability (JSA11279) CVE-2022-22173 12 Jan 2022 7.5 (v3) High Pass Apache Tomcat 9.0.0.M1 < 9.0.37 Multiple Vulnerabilities CVE-2020-13934 CVE-2020-13935 17 Jul 2020 7.5 (v3) High Pass PHP 7.2.x < 7.2.32 / 7.3.x < 7.3.20 / 7.4.x < 7.4.8 Information Disclosure CVE-2020-8169 17 Jul 2020 7.5 (v3) High Pass phpMyAdmin 4.x < 4.9.4 / 5.x < 5.0.1 SQLi (PMASA-2020-1) CVE-2020-5504 17 Jul 2020 8.8 (v3) High Pass Magento Unsupported Version Detection 17 Jul 2020 10 (v3) Critical Pass TYPO3 9.4 < 9.5.8 Insecure Deserialization (TYPO3-CORE-SA-2019-016) CVE-2019-10912 20 Jul 2020 7.1 (v3) High Pass Juniper Junos OS Vulnerability (JSA11270) CVE-2022-22162 12 Jan 2022 7.8 (v3) High Pass Juniper Junos OS Multiple Vulnerabilities (JSA11277) CVE-2022-22170 CVE-2022-22171 12 Jan 2022 7.5 (v3) High Pass Juniper Junos OS Vulnerability (JSA11281) CVE-2022-22175 12 Jan 2022 7.5 (v3) High Pass Juniper Junos OS Vulnerability (JSA11293) CVE-2021-3712 12 Jan 2022 7.4 (v3) High Pass Juniper Junos OS Vulnerability (JSA11280) CVE-2022-22174 12 Jan 2022 7.5 (v3) High Pass Juniper Junos OS Vulnerability (JSA11284) CVE-2022-22178 12 Jan 2022 7.5 (v3) High Pass Atlassian JIRA < 7.13.18 / 8.x < 8.5.9 / 8.6.x < 8.12.2 Information Disclosure (JRASERVER-71696) CVE-2020-14185 22 Oct 2020 5.3 (v3) Medium Pass Oracle Oracle E-Business Suite (Oct 2020 CPU) CVE-2020-14746 CVE-2020-14761 CVE-2020-14774 CVE-2020-14805 CVE-2020-14808 CVE-2020-14811 CVE-2020-14816 CVE-2020-14817 CVE-2020-14819 CVE-2020-14822 CVE-2020-14823 CVE-2020-14826 CVE-2020-14831 CVE-2020-14833 CVE-2020-14834 CVE-2020-14835 CVE-2020-14840 CVE-2020-14849 CVE-2020-14850 CVE-2020-14851 CVE-2020-14855 CVE-2020-14856 CVE-2020-14857 CVE-2020-14862 CVE-2020-14863 CVE-2020-14875 CVE-2020-1487622 Oct 2020 9.8 (v3) Critical Pass PHP 7.4.x < 7.4.12 DoS 16 Nov 2020 5.9 (v3) Medium Pass PHP 7.3.x < 7.3.25 / 7.4.x < 7.4.13 Multiple Vulnerabilities 03 Dec 2020 5.6 (v3) Medium Pass Apache Struts 2.x < 2.3.1.1 Multiple Vulnerabilities CVE-2011-3923 CVE-2012-0392 20 Nov 2020 8.1 (v3) High Pass GitLab 8.15.x < 14.6.5 / 14.7.x < 14.7.4 / 14.8.x < 14.8.2 DoS CVE-2022-0489 14 Mar 2022 5.7 (v3) Medium Pass PHP < 5.2.3 Multiple Vulnerabilities CVE-2007-1887 CVE-2007-1900 CVE-2007-2756 CVE-2007-2872 CVE-2007-3007 02 Jun 2007 7.3 (v3) High Pass XOOPS Multiple Modules spaw_control.class.php spaw_root Parameter Remote File Inclusion CVE-2007-3057 CVE-2007-3220 CVE-2007-3221 CVE-2007-3237 CVE-2007-3289 02 Jun 2007 7.5 (v2) High Pass PNphpBB2 index.php c Parameter SQL Injection CVE-2007-3052 05 Jun 2007 7.5 (v2) High Pass SNMPc Management Server Detection 05 Jun 2007 None Pass BASE Authentication Redirect Authentication Bypass CVE-2007-5578 07 Jun 2007 7.5 (v2) High Pass PBLang login.php lang Parameter Local File Inclusion CVE-2007-3096 07 Jun 2007 6.8 (v2) Medium Pass JFFNMS auth.php Multiple Parameter SQL Injection CVE-2007-3190 12 Jun 2007 9.4 (v2) High Pass Firebird DataBase Server fbserver.exe p_cnct_count Value Remote Overflow CVE-2007-3181 13 Jun 2007 10 (v2) Critical Pass Apache Tomcat snoop.jsp URI XSS CVE-2007-2449 18 Jun 2007 5.3 (v3) Medium Pass Apache MyFaces Tomahawk JSF Application autoscroll Multiple XSS CVE-2007-3101 19 Jun 2007 4.3 (v2) Medium Pass FuseTalk index.cfm txForumID Parameter SQL Injection CVE-2007-3273 20 Jun 2007 7.5 (v2) High Pass FuseTalk Multiple Script XSS CVE-2007-3339 21 Jun 2007 4.3 (v2) Medium Pass Calendarix calendar.php Multiple Parameter SQL Injection CVE-2007-3183 26 Jun 2007 6.8 (v2) Medium Pass Ingres Communications Server Detection 26 Jun 2007 None Pass Maia Mailguard login.php lang Parameter Local File Inclusion CVE-2007-3619 06 Jul 2007 5 (v2) Medium Pass MDaemon Server DomainPOP Malformed Message DoS CVE-2007-3622 10 Jul 2007 2.6 (v2) Low Pass MS07-039: Vulnerability in Windows Active Directory Could Allow Remote Code Execution (926122) (uncredentialed check)CVE-2007-0040 CVE-2007-3028 11 Jul 2007 10 (v2) Critical Pass paFileDB includes/search.php categories Parameter SQL Injection CVE-2007-3808 16 Jul 2007 7.5 (v2) High 89
RELAYTO Penetration Test Results Page 88 Page 90