N-Stalker has made available the latest database update (v126) for N-Stealth Web Security Scanner.

You should be able to receive it automatically next time you execute the scanner.
To manually download it, use the url https://secure.nstalker.com/customercenter/.
If you need any additional assistance during this process, please, contact us at:
E-mail: [email protected] (24hs) or
Phone: +55-11-3675-7093 (9am to 18pm GMT-0300)

This release has included the following vulnerabilities:

- Open WebMail 2.21 Remote Command Execution Variant Vulnerability
- Tutorials Manager 1.0 Multiple Remote SQL Injection Vulnerabilities
- MailEnable Mail Server HTTPMail 1.116 Remote Heap Overflow Vulnerability
- Adam Webb NukeJokes 1.7 Module For PHP-Nuke Multiple Input Validation Vulnerabilities
- MyWeb 3.3 HTTP Server GET Request Buffer Overflow Vulnerability
- Microsoft ASP.NET 1.1 Malformed HTTP Request Information Disclosure Vulnerability
- Verity Ultraseek 5.2.1 Error Message Path Disclosure Vulnerability
- E-Zone Media FuzeTalk 2.0 AddUser.CFM Administrator Command Execution Vulnerability
- JelSoft VBulletin 3.3.0 Forum Creation HTML Injection Vulnerability
- PHPNuke 7.2 Modules.php Multiple SQL Injection Vulnerabilities
- PHPX 3.2.6 Multiple Cross-Site Scripting Vulnerabilities
- PHPX 3.2.6 Multiple Administrator Command Execution Vulnerability
- Simple Machines Forum 1.0 Size Tag HTML Injection Vulnerability
- SurgeLDAP 1.0g Web Administration Authentication Bypass Vulnerability
- OMail Webmail 0.98.5 Remote Command Execution Vulnerability
- Aldo’s Web Server Multiple Input Validation Vulnerabilities
- PROPS 0.6.1 SQL Injection and Cross-Site Scripting Vulnerabilities
- JForum RC2 Unauthorized Forum Access Vulnerability
- Rosiello Security Sphiro HTTPD 0.1b Remote Heap Buffer Overflow Vulnerability
- Moodle 1.2.1 Cross Site Scripting Vulnerability
- SquirrelMail 1.4.2 Folder Name Cross-Site Scripting Vulnerability
- Coppermine Photo Gallery 1.2.2 Multiple Input Validation Vulnerabilities
- ReciPants 1.1.1 SQL Injection and Cross-Site Scripting Vulnerabilities
- Web Wiz Forum Multiple Vulnerabilities
- Admin Access With Levels Plug-in For osCommerce 1.5.1 Access Control Bypass Vulnerability
- PAFileDB 3.1 ID Variable Cross-Site Scripting Vulnerability
- DiGi Compieuw 1 WWW Server Remote Denial Of Service Vulnerability
- HP Web Jetadmin 7.0 Multiple Vulnerabilities

N-Stealth DB General Information
Version: 126
Release Date: 05/16/2004