Sql injection

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote attackers to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field...

Sql injection

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field, leading to execution of operating-system...

CVE-2013-3578

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field, leading to execution of operating-system...

CVE-2013-3577: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote attackers to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field...

PT-2013-4490

Name of the Vulnerable Software and Affected Versions Wave EMBASSY Remote Administration Server ERAS affected versions not specified Description The issue allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter, which is the...

CVE-2013-3578: Improper Neutralization of Special Elements used in an OS Command

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field, leading to execution of operating-system...

PT-2013-4489

Name of the Vulnerable Software and Affected Versions Wave EMBASSY Remote Administration Server ERAS affected versions not specified Description A SQL injection issue in the Help Desk application of Wave EMBASSY Remote Administration Server ERAS allows remote attackers to execute arbitrary SQL...

CVE-2013-3421: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Help index page in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170...

PT-2013-4378

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS affected versions not specified Description A cross-site scripting XSS issue exists in the Help index page, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter...

PT-2013-1329

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS Help Desk versions 3.0.x through 3.0.21 Open Ticket Request System OTRS Help Desk versions 3.1.x through 3.1.17 Open Ticket Request System OTRS Help Desk versions 3.2.x through 3.2.8 Description The issue is...

PT-2013-4334

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance Operations Manager affected versions not specified Description The issue concerns an open redirect vulnerability in the help page, allowing remote attackers to redirect users to arbitrary web sites and conduct phishing...

CVE-2013-3376: Improper Input Validation

Open redirect vulnerability in the help page in Cisco Video Surveillance Operations Manager allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka Bug ID CSCty74490...

PHD Help Desk 2.12 SQL Injection

Exploit Title: PHD Help Desk 2.12 SQLi Date: 05/24/2013 Exploit Author: drone @dronesec More information: http://forelsec.blogspot.com/2013/06/phd-help-desk-212-sqli-and-xss.html Vendor Homepage: http://www.p-hd.com.ar/ Software Link:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Eclipse Help System IEHS 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-0464

Multiple cross-site scripting XSS vulnerabilities in IBM Eclipse Help System IEHS 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL...

UBUNTU-CVE-2013-0464

Multiple cross-site scripting XSS vulnerabilities in IBM Eclipse Help System IEHS 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-0464

Multiple cross-site scripting XSS vulnerabilities in IBM Eclipse Help System IEHS 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-0464

CVE-2013-0464 is an XSS vulnerability in the IBM Eclipse Help System (IEHS) shipped with multiple IBM products. The issue affects IEHS versions 3.4.3 and 3.6.2, used by IBM SPSS Data Collection (versions 6.0, 6.0.1, 7.0) and by WebSphere-related components, allowing remote attackers to inject arb...

CVE-2013-0464

Multiple cross-site scripting XSS vulnerabilities in IBM Eclipse Help System IEHS 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-0464: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Eclipse Help System IEHS 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL...