CVE-2009-2604

CVE-2009-2604 concerns multiple SQL injection vulnerabilities in Zen Help Desk 2.1, specifically in adminlogin.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands via the (1) userid and (2) PassWord parameters to admin.asp. The affected component is the admin login fl...

CVE-2009-2604

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

Micro's Articles system v1. 5 1 vulnerability-vulnerability warning-the black bar safety net

This system previously it was analysed today see with the updated version so download the back to see The previous vulnerability is up, but new holes came a is upload vulnerability A is background injection The first says that transfer in /manage/video/upfilesoft. asp does not contain the...

Zen Help Desk 2.1 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- ------------------------------------------------------------ Zen Help Desk Version 2.1 Auth Bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder...

Zen Help Desk 2.1 SQL Injection

--------------------------------------------------------------- ------------------------------------------------------------ Zen Help Desk Version 2.1 Auth Bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

Zen Help Desk 2.1 - Authentication Bypass

Zen Help Desk 2.1 - Authentication Bypass --------------------------------------------------------------- ------------------------------------------------------------ Zen Help Desk Version 2.1 Auth Bypass SQL Injection Vulnerability ---------------------------------------------------------------...

Zen Help Desk 2.1 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Zen Help Desk 2.1 Auth Bypass SQL Injection Vulnerability =========================================================== ------------------------------------------------------------...

Zen Help Desk 2.1 - Authentication Bypass

--------------------------------------------------------------- ------------------------------------------------------------ Zen Help Desk Version 2.1 Auth Bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Web Help Desk 9.1.22 evaluation version allow remote attackers to inject arbitrary web script or HTML via the 1 Report Name, 2 Asset No., and 3 Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the detail...

CVE-2009-1261

Multiple cross-site scripting XSS vulnerabilities in Web Help Desk 9.1.22 evaluation version allow remote attackers to inject arbitrary web script or HTML via the 1 Report Name, 2 Asset No., and 3 Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the detail...

CVE-2009-1261

The CVE-2009-1261 entry describes multiple cross-site scripting (XSS) flaws in Web Help Desk 9.1.22 (evaluation version). The vulnerabilities allow remote attackers to inject arbitrary script/HTML via three input fields in a Models action: Report Name, Asset No., and Full Name. The linked records...

CVE-2008-6222

Directory traversal vulnerability in the Pro Desk Support Center comprodesk component 1.0 and 1.2 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the includefile parameter to index.php...

CVE-2008-6222

Joomla! Pro Desk (com_pro_desk) 1.0/1.2 is affected by a Local File Inclusion vulnerability in index.php via include_file using a .. path. This can allow remote attackers to read arbitrary files and potentially disclose sensitive information. The Nuclei template confirms the issue and describes t...

CVE-2008-6057

Doug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request...

Improper access control

Doug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request...

CVE-2008-6057

The vulnerability CVE-2008-6057 affects Doug Luxem Liberum Help Desk 0.97.3, where the database file db/helpdesk2000.mdb is stored under the web root with insufficient access control. This allows remote attackers to obtain passwords via a direct request. The NVD entry lists a base score of 5.0 (M...

CVE-2008-6057

Doug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request...

CVE-2009-0303

Cross-site scripting XSS vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa...

Cross site scripting

Cross-site scripting XSS vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa...

CVE-2009-0303

Cross-site scripting XSS vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa...