4184 matches found
CVE-2019-16956: Improper Neutralization of Input During Web Page Generation
SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...
Solarwinds WebHelpDesk 跨站脚本漏洞
SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to conduct a cross-site scripting attack via a CSV template file with a specially craft...
PT-2021-8994
Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk version 12.7.0 Description The issue allows for cross-site scripting XSS attacks via a crafted CSV template file, specifically by manipulating the Location Name field. This can potentially lead to the execution of...
PT-2021-8993
Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk version 12.7.0 Description The issue allows for cross-site scripting XSS attacks via the Request Type parameter of a ticket. This means an attacker could potentially inject malicious scripts into the website, affecting...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
Remote Code Execution Exploit in Apache Tomcat 9.0.27 Apache...
Command Execution Vulnerability in Homework Help Live Classes Student Side PC Client Software
Homework Help Live Classes is a premium online live tutoring product under Homework Help. Homework Help Live Classes student-side pc client software has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL file into the client process. An attacker can...
Security Bulletin: Vulnerabilities in IBM Rational Synergy's Help System (CVE-2013-0464, CVE-2013-0467, CVE-2013-0599)
Summary IBM Rational Synergy can be affected by three vulnerabilities in the IBM Eclipse Help System IEHS, which is used to display the IBM Rational Synergy help content. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow thi...
CVE-2019-16959
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...
CVE-2019-16959
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...
Design/Logic Flaw
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...
CVE-2019-16959
SolarWinds Web Help Desk 12.7.0 is affected by a CSV Injection (Formula Injection) vulnerability via a file attached to a ticket. The issue is described consistently across sources (CVE-2019-16959, Red Hat CVE page, NVD record). The exact root cause is not elaborated beyond the CSV/Formula Inject...
CVE-2019-16959
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...
Mitel MiCollab Insufficient Access Control Vulnerability
Mitel MiCollab is an enterprise collaboration software and tools platform solution. An insufficient access control vulnerability exists in the online help portal in Mitel MiCollab versions prior to 9.2. An attacker could exploit the vulnerability by executing a malicious script to redirect users ...
SolarWinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2020-73160)
SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via an SVG document uploaded in a...
CVE-2019-16959: Improper Neutralization of Formula Elements in a CSV File
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...
PT-2020-9849
Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk version 12.7.0 Description The issue allows CSV Injection, also known as Formula Injection, via a file attached to a ticket. Recommendations For SolarWinds Web Help Desk version 12.7.0, consider restricting the ability...
SolarWinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2020-73161)
SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "name" field of a user account...
CVE-2019-16957
SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account...