Sun Java Web Server vulnerabilities and new updates
N-Stalker has made available the latest database update (v153) for N-Stealth Web Security Scanner.
You should be able to receive it automatically next time you execute the scanner.
![]() |
to manually download it, use the url: https://secure.nstalker.com/customercenter/ |
If you need any additional assistance during this process, please, contact us at:
E-mail: support at nstalker (24hs) or
Phone: +55-11-3675-7093 (9am to 18pm GMT-0300)
This release has included the following vulnerabilities:
– Datenbank Module For PHPBB Remote Mod.PHP Cross-Site Scripting Vulnerability
– PHPBB Remote Mod.PHP SQL Injection Vulnerability
– Ariadne CMS Remote File Include Vulnerability
– PHP-Nuke 7.6 Surveys Module HTTP Response Splitting Vulnerability
– Xerox MicroServer Web Server Default Account Authentication Bypass Vulnerability
– Mafia Blog Administrator Authentication Bypass Vulnerability
– MyBloggie 2.1.1 Comment HTML Injection Vulnerability
– Monkey 0.9.1 HTTP Daemon CGI Processor Format String Vulnerability
– PHPMyAdmin 2.6.1 Convcharset Cross-Site Scripting Vulnerability
– IlohaMail 0.8.14rc2 Email Message Remote HTML Injection Vulnerability
– SPHPBlog 0.4.0 Search.PHP Cross-Site Scripting Vulnerability
– S9Y Serendipity 0.8 Exit.PHP SQL injection Vulnerability
– All4WWW-HomePageCreator 1.0 Index.PHP Arbitrary Remote File Include Vulnerability
– Sun Java System Web Server 6.0 Unspecified Denial of Service Vulnerability
– PHPBB Photo Album 2.0.53 Module Album_Comment.PHP Cross-Site Scripting Vulnerability
– PHPBB Photo Album Module Album_Cat.PHP Cross-Site Scripting Vulnerability
– PHPBB2 Plus 1.52 ViewTopic.PHP Cross-Site Scripting Vulnerability
– PHPBB2 Plus 1.52 ViewForum.PHP Cross-Site Scripting Vulnerability
– PHPBB2 Plus 1.52 Portal.PHP Multiple Cross-Site Scripting Vulnerabilities
– PHPBB2 Plus 1.52 GroupCP.PHP Cross-Site Scripting Vulnerability
– PHPBB2 Plus 1.52 Index.PHP Multiple Cross-Site Scripting Vulnerabilities
– ACNews 1.0 Login.ASP SQL Injection Vulnerability
– PostNuke Phoenix 0.760 SID Parameter Remote SQL Injection Vulnerability
– Pinnacle Cart Index.PHP Cross-Site Scripting Vulnerability
– XAMPP 1.4.13 Insecure Default Password Disclosure Vulnerability
– XAMPP 1.4.13 Guestbook-EN.PL Remote HTML Injection Vulnerability
– IBM Lotus Domino Server 6.5.3 Malformed POST Request Remote Buffer Overflow Vulnerability
– XAMPP 1.4.13 Phonebook.PHP Remote HTML Injection Vulnerability
– XAMPP 1.4.13 CDS.PHP Remote HTML Injection Vulnerability
– JPortal 2.3.1 Banner.PHP SQL Injection Vulnerability
– Comersus Cart 5.0.9 Comersus_Search_Item.ASP Cross-Site Scripting Vulnerability
– AEwebworks Dating Software AeDating 3.2 Index.PHP Local File Include Vulnerability
– AEwebworks Dating Software AeDating 3.2 Sdating.PHP SQL Injection Vulnerability
– TowerBlog 0.6 User Credential Exposure Weakness
– Azerbaijan Development Group AzDGDatingPlatinum 1.1.0 Multiple Vulnerabilities
N-Stealth DB General Information
Version: 153
Release Date: 06/15/2005