Crafty Syntax Live Help 2.9.9 - Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/20711/info Crafty Syntax Live Help is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

PMOS Help Desk 2.3 ticket.php email Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21250/info InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context...

Crafty Syntax Live Help <= 2.14.6 (department) SQL Injection Vuln

No description provided by source. Crafty Syntax Live Help = 2.14.6 SQL Injection August 25, 2008 Vendor : Eric Gerdes URL : http://www.craftysyntax.com Version : Crafty Syntax Live Help = 2.14.6 Risk : SQL Injection Description: Crafty Syntax Live Help is a full featured, open source, online...

Microsoft HTML Help <= 6.1 Stack Overflow

No description provided by source. Source: http://aluigi.org/adv/chm1-adv.txt Luigi Auriemma Application: Microsoft HTML Help http://www.microsoft.com Versions: = 6.1 Platforms: Windows any version included the latest Windows 7 Bug: stack overflow Date: 12 Apr 2011 found 20 Feb 2011 Author: Luigi...

Microsoft Windows XP/ME Help and Support Center Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6966/info The Microsoft Windows ME Help and Support Center is prone to a buffer overflow. This is due to insufficient bounds checking on input supplied through the HCP URI parameter. An attacker can exploit this...

MS Internet Explorer (<= XP SP2) HTML Help Control Local Zone Bypass

No description provided by source...

PMOS Help Desk <= 2.4 - Remote Command Execution Exploit

No description provided by source. ?php / ------------------------------------------------------ PMOS Help Desk = 2.4 Remote Command Execution Exploit ------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.h2desk.com/pmos...

Cartweaver 3 Local File Inclusion Vulnerability

No description provided by source. Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8 Vulnerability is in the He...

Crowdsourcing a Tool for Application Vulnerability Research

Pulling in security help on a project has traditionally meant either hiring more full-time help, or bringing in an outside consultant. Enterprises and vendors alike, however, are starting to really go outside the perimeter these days and are taking advantage of crowdsourcing. Given the paranoia i...

openSUSE Security Update : icinga (openSUSE-SU-2014:0069-1)

imported upstream version 1.10.2 - includes fix for possible denial of service in CGI executables: CVE-2013-7108 bnc856837 - core: Add an Icinga syntax plugin for Vim 4150 - LE/MF - core: Document dropped options logexternalcommandsuser and eventprofilingenabled 4957 - BA - core: type in spec...

CVE-2014-3806: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attackers to read arbitrary files via a .. dot dot in the xmlpath parameter...

PT-2014-5514

Name of the Vulnerable Software and Affected Versions VMTurbo Operations Manager versions prior to 4.6 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the xml path parameter of the cgi-bin/help/doIt.cgi...

Directory traversal

Directory traversal vulnerability in IBM Eclipse Help System IEHS in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL...

CVE-2014-0917

Cross-site scripting XSS vulnerability in IBM Eclipse Help System IEHS in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0917

IBM Eclipse Help System (IEHS) is vulnerable to Cross-Site Scripting due to improper validation of user input in the IEHS HTML contents referenced by WebSphere Portal. A crafted URL can inject arbitrary JavaScript, affecting IEHS versions 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7....

CVE-2014-0918

CVE-2014-0918 is a directory traversal vulnerability in the IBM Eclipse Help System (IEHS) used by IBM WebSphere Portal. Affected versions include WebSphere Portal 6.1.0–6.1.0.6 CF27, 6.1.5–6.1.5.3 CF27, 7.0–7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06. A crafted URL could cause reading arbitrary fi...

CVE-2014-0918

Directory traversal vulnerability in IBM Eclipse Help System IEHS in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL...

CVE-2014-0917

Cross-site scripting XSS vulnerability in IBM Eclipse Help System IEHS in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0917: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Eclipse Help System IEHS in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0918: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IBM Eclipse Help System IEHS in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL...