CVE-2009-3730

Multiple cross-site scripting XSS vulnerabilities in the ReqWeb Help feature aka the Web Client Help system in IBM Rational RequisitePro 7.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the operation parameter to ReqWebHelp/advanced/workingSet.jsp, or the 2 searchWord, 3...

CVE-2009-3730: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the ReqWeb Help feature aka the Web Client Help system in IBM Rational RequisitePro 7.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the operation parameter to ReqWebHelp/advanced/workingSet.jsp, or the 2 searchWord, 3...

PHP Live! Detection

This host is running PHP Live!. PHP Live! enables live help and live customer support communication directly from a website. OpenVAS Vulnerability Test $Id: phplivedetect.nasl 5739 2017-03-27 14:48:05Z cfi $ PHP Live! Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks...

Microsoft showHelp (MS04-023; CVE-2003-1041)

An HTML Help URI provides a link to a compiled help file .chm. When a user references this link, Windows will access the resource. To launch the Help URI with the local HTML Help Windows application, the method showHelp can be used. There is a vulnerability in the way Microsoft's HTML help system...

Solaris 10 (x86) : 122471-05 (deprecated)

GNOME 2.6.0x86: GNOME Java Help Patch. Date this patch was last updated by Sun : Jul/09/10 This plugin has been deprecated and either replaced with individual 122471 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

CVE-2009-2742

Cross-site scripting XSS vulnerability in Eclipse Help in IBM WebSphere Application Server WAS 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input...

CVE-2009-2742

Cross-site scripting XSS vulnerability in Eclipse Help in IBM WebSphere Application Server WAS 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input...

CVE-2009-2742

IBM WebSphere Application Server 6.1 before 6.1.0.27 is affected by a cross-site scripting (XSS) vulnerability in the Eclipse Help component. The root cause is insufficient validation of input in Eclipse Help, allowing remote attackers to inject arbitrary script/HTML via unspecified input. Affect...

CVE-2009-2742: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Eclipse Help in IBM WebSphere Application Server WAS 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input...

IBM WebSphere Application Server Eclipse Help跨站脚本漏洞

Bugraq ID: 36455 CVE ID：CVE-2009-2742 IBM WebSphere Application Server是一款商业性质的WEB应用服务程序。 IBM WebSphere Application Server包含的Eclipse Help组件不正确验证用户提供的输入，远程攻击者可以利用漏洞使用特殊构建的URL，诱使用户点击，可在目标用户浏览器上执行任意脚本代码。 目前没有详细漏洞细节提供。 IBM Websphere Application Server 6.1 25 IBM Websphere Application Server 6.1 23 IBM...

Three Pillars Help Desk 3 SQL Injection

-------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] ------------------------------------------------------- Script:He...

Three Pillars Help Desk v3 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Three Pillars Help Desk v3 Auth Bypass SQL Injection Vulnerability ====================================================================...

Three Pillars Help Desk 3.0 - Authentication Bypass

Three Pillars Help Desk 3.0 - Authentication Bypass -------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

Three Pillars Help Desk v3 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

Three Pillars Help Desk 3.0 - Authentication Bypass

-------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] ------------------------------------------------------- Script:He...

CVE-2008-7146: Exposure of Sensitive Information to an Unauthorized Actor

IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allows remote attackers to obtain sensitive information via a direct request to 1 KnowledgeImpactCourse.htm, 2 LRN-formattedCourse.htm, or 3 CreateCourse.htm in help/1/Instructor/, which reveals the installation path in...

CVE-2008-6972: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Drupal Content Construction Kit CCK 5.x through 5.x-1.8 allow remote authenticated users with "administer content" permissions to inject arbitrary web script or HTML via the 1 "field label," 2 "help text," or 3 "allowed values" settings...

Unfixed XSS vulnerability at www.psy-help-online.ch

Security researcher Fabian Fingerle, has submitted on 28/07/2009 a cross-site-scripting XSS vulnerability affecting www.psy-help-online.ch, which at the time of submission ranked 23248220 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Sql injection

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

CVE-2009-2604

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...