CVE-2009-0303

CVE-2009-0303 describes a Cross-site scripting (XSS) vulnerability in the Web Help Desk product prior to version 9.1.18. The vulnerability allows remote attackers to inject arbitrary web script or HTML via vectors related to encoded JavaScript and Helpdesk.woa. The available connected sources con...

TSC2 Help Desk ActiveX buffer overflow

CTab ActiveX buffer overflow...

Secunia Research: TSC2 Help Desk CTab ActiveX Control Buffer Overflow

====================================================================== Secunia Research 07/01/2009 - TSC2 Help Desk CTab ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

SizerOne ActiveX Control AddTab Method Remote Buffer Overflow

The SizerOne ActiveX control is installed on the remote system. It is included with ComponentOne Studio Enterprise as well as other applications such as TSC2 Help Desk and SAP GUI. The installed version of the control is affected by a heap-based buffer overflow vulnerability that can be triggered...

多个供应商SizerOne ActiveX控件'AddTab'方法缓冲区溢出漏洞

BUGTRAQ ID: 33148 CNCAN ID：CNCAN-2009010809 ComponentOne SizerOne是一款集成了四个控件的组件工具，包括了两个调整分割控件用来控制所有的调整分割任务，一个个Tabbling控件用来快速创建类似记事本和OutLook风格的Tab，一个字符分割控件自动处理分割和剪切字符的工作。 ComponentOne SizerOne包含的控件对'AddTab'方法处理存在问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 -TAB...

Liberum Help Desk 0.97.3 SQL Injection

Liberum Help Desk SQL/DD Multiple Remote Vulnerabilities author : Cold z3ro, www.hackteach.org Dork : "Liberum Help Desk, Copyright C 2001 Doug Luxem" ============== SQL Injection http://www.site.com/path/forgotpass.asp In uid insert SQL command's = SCMD == ' or '1=1 SCMD == ' or 'update tblusers...

Liberum Help Desk 0.97.3 - SQL Injection File Disclosure

Liberum Help Desk 0.97.3 - SQL Injection File Disclosure Liberum Help Desk SQL/DD Multiple Remote Vulnerabilities author : Cold z3ro, www.hackteach.org Dork : "Liberum Help Desk, Copyright C 2001 Doug Luxem" ============== SQL Injection http://www.site.com/path/forgotpass.asp In uid insert SQL...

Liberum Help Desk 0.97.3 (SQL/DD) Remote Vulnerabilities

No description provided by source. Liberum Help Desk SQL/DD Multiple Remote Vulnerabilities author : Cold z3ro, www.hackteach.org Dork : "Liberum Help Desk, Copyright C 2001 Doug Luxem" ============== SQL Injection http://www.site.com/path/forgotpass.asp In uid insert SQL command's = SCMD == ' or...

Liberum Help Desk 0.97.3 (SQL/DD) Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Liberum Help Desk 0.97.3 SQL/DD Remote Vulnerabilities ======================================================== Liberum Help Desk SQL/DD Multiple Remote Vulnerabilities Dork : "Liber...

Liberum Help Desk 0.97.3 - SQL Injection / File Disclosure

Liberum Help Desk SQL/DD Multiple Remote Vulnerabilities author : Cold z3ro, www.hackteach.org Dork : "Liberum Help Desk, Copyright C 2001 Doug Luxem" ============== SQL Injection http://www.site.com/path/forgotpass.asp In uid insert SQL command's = SCMD == ' or '1=1 SCMD == ' or 'update tblusers...

Joomla Component ProDesk 1.0/1.2 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== Joomla Component ProDesk 1.0/1.2 Local File Inclusion Vulnerability ===================================================================...

Computer Associates Service Desk Web表单跨站脚本漏洞

BUGTRAQ ID: 31412 CVE ID：CVE-2008-4119 CNCVE ID：CNCVE-20084119 Computer Associates Service Desk是一款帮助台解决方案。 Computer Associates Service Desk处理WEB表单的数据时缺少充分过滤，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得目标用户敏感信息。 攻击者可以构建恶意WEB页，诱使用户点击进行攻击。 Computer Associates Service Desk r11.2 Computer Associates CMDB 11.2 Computer...

CA Service Desk crossite scripting

Multiple crossite scripting vulnerabilities...

CVE-2008-4119

Multiple cross-site scripting XSS vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "multiple web forms."...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "multiple web forms."...

CVE-2008-4119

Multiple cross-site scripting XSS vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "multiple web forms."...

CVE-2008-4119

CA Service Desk CVE-2008-4119 describes multiple cross-site scripting vulnerabilities affecting CA Service Desk r11.2 and CA CMDB 11.0–11.2. The root cause, per sources, is insecure handling of passed variables in multiple web forms, enabling remote attackers to inject arbitrary script via unspec...

CA Products That Embed Ingres Multiple Vulnerabilities

Title: CA Products That Embed Ingres Multiple Vulnerabilities CA Advisory Date: 2008-08-01 Reported By: iDefense Labs Impact: A remote attacker can execute arbitrary code, gain privileges, or cause a denial of service condition. Summary: CA products that embed Ingres contain multiple...

Virtual Support Office-XP <= 3.0.29 Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Virtual Support Office-XP Multiple Vulnerabilities. Vendor: www.vso-xp.com Vulnerable Version: 3.0.29, 3.0.27 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

virtualsupport-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Virtual Support Office-XP Multiple Vulnerabilities. Vendor: www.vso-xp.com Vulnerable Version: 3.0.29, 3.0.27 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/47 1. Description: Virtual Suppo...