CVE-2006-7145: Undefined Security Weakness

edituser.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified userid parameter...

CVE-2006-7143: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field...

CVE-2007-1161

Cross-site scripting XSS vulnerability in callentry.php in Call Center Software 0,93 allows remote attackers to inject arbitrary web script or HTML via the problemdesc parameter, as demonstrated by the ONLOAD attribute of a BODY element...

Cross site scripting

Cross-site scripting XSS vulnerability in callentry.php in Call Center Software 0,93 allows remote attackers to inject arbitrary web script or HTML via the problemdesc parameter, as demonstrated by the ONLOAD attribute of a BODY element...

CVE-2007-1161

Cross-site scripting XSS vulnerability in callentry.php in Call Center Software 0,93 allows remote attackers to inject arbitrary web script or HTML via the problemdesc parameter, as demonstrated by the ONLOAD attribute of a BODY element...

CVE-2007-1161

CVE-2007-1161 is a documented cross-site scripting (XSS) vulnerability in Call Center Software 0,93, exposed via call_entry.php where the problem_desc parameter can be exploited to inject HTML/JS (e.g., ONLOAD on BODY). The issue is triggered by improper handling of user-supplied data, enabling r...

CVE-2007-1161

Cross-site scripting XSS vulnerability in callentry.php in Call Center Software 0,93 allows remote attackers to inject arbitrary web script or HTML via the problemdesc parameter, as demonstrated by the ONLOAD attribute of a BODY element...

CVE-2007-1161: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in callentry.php in Call Center Software 0,93 allows remote attackers to inject arbitrary web script or HTML via the problemdesc parameter, as demonstrated by the ONLOAD attribute of a BODY element...

ccs-xss.txt

-=--------------------ADVISORY-------------------=- Call center 0,93 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Call senter -=+ Version: 0,93 -=+ Vendor's URL: http://www.call-center-software.org/ -=+ Platform: Windows\Linux\Unix -=+ Bug...

[Full-disclosure] Call Center Software - Remote Xss Post Exploit -

-=--------------------ADVISORY-------------------=- Call center 0,93 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Call senter -=+ Version: 0,93 -=+ Vendor's URL: http://www.call-center-software.org/ -=+ Platform: WindowsLinuxUnix -=+ Bug...

[Full-disclosure] MHL-2006-002 Public Advisory: "Call-Center-Software" Multiple Security Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MHL-2006-002 - Public Advisory +-----------------------------------------------------------+ | Call-Center-Software Multiple Security Issues | +-----------------------------------------------------------+ PUBLISHED ON October 11th, 2006 PUBLISHED AT...

CVE-2006-3716

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka Oracle Vuln 1 APPS01 for Internet Expenses; 2 APPS02, 3 APPS05, 4 APPS06, 5 APPS07, 6 APPS08, 7 APPS09, and 8 APPS10 for Oracle Application Object Library; 9...

CVE-2006-3716

Technical details about CVE-2006-3716 are not publicly provided in the supplied documents. No affected products, versions, impact, or remediation are specified here. Monitor for official updates and disclosures.

CVE-2006-3716: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka Oracle Vuln 1 APPS01 for Internet Expenses; 2 APPS02, 3 APPS05, 4 APPS06, 5 APPS07, 6 APPS08, 7 APPS09, and 8 APPS10 for Oracle Application Object Library; 9...

CVE-2005-4452

Information Call Center stores the CallCenterData.mdb database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords...

CVE-2005-4452

Information Call Center stores the CallCenterData.mdb database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords...

[SA18159] Information Call Center "CallCenterData.mdb" Exposure of User Credentials

TITLE: Information Call Center "CallCenterData.mdb" Exposure of User Credentials SECUNIA ADVISORY ID: SA18159 VERIFY ADVISORY: http://secunia.com/advisories/18159/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Information Call Center...

CVE-2005-4452: Undefined Security Weakness

Information Call Center stores the CallCenterData.mdb database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords...

Yahoo! Messenger 5.0 - Call Center Buffer Overflow

Yahoo! Messenger 5.0 - Call Center Buffer Overflow // source: https://www.securityfocus.com/bid/4837/info Yahoo! Messenger configures the 'ymsgr:' URI handler when it is installed. The handler invokes YPAGER.EXE with the supplied parameters. YPAGER.EXE accepts the 'call' argument; it is used for...

Yahoo! Messenger 5.0 - Call Center Buffer Overflow

// source: https://www.securityfocus.com/bid/4837/info Yahoo! Messenger configures the 'ymsgr:' URI handler when it is installed. The handler invokes YPAGER.EXE with the supplied parameters. YPAGER.EXE accepts the 'call' argument; it is used for starting the 'Call Center' feature. There is a stac...