CVE-2005-4025

Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...

CVE-2005-4025

Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...

CVE-2005-4025

CVE-2005-4025 affects Help Desk Reloaded Free Help Desk. The vulnerability arises because install.php is not removed/protected after installation, enabling remote attackers to gain privileges by directly requesting install.php and then accessing accountsetup.php to create a new user. Public sourc...

freeHelpInject.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 018 ------------------------------------------------------ Date - 11/2005 Free Help Desk Software Inject Admin Account AFFECTED PRODUCTS ================= Free Help Desk http://www.helpdeskreloaded.com Overview:...

Hesk Session ID Validation Vulnerability

OS2A Hesk Session ID Validation Vulnerability OS2A ID: OS2A1003 Status 9/13/2005 Issue Discovered 9/14/2005 Reported to the vendor 9/18/2005 Patch Released 9/20/2005 Advisory Released Class: Authentication Bypass Severity: CRITICAL Overview: Hesk is a PHP based help desk software that runs with a...

Echo Security Advisory 2005.14

.OR.ID ECHOADV14$2005 --------------------------------------------------------------------------- Multiple Vulnerabilities in Liberum Help Desk --------------------------------------------------------------------------- Author: Dedi Dwianto Date: June, 02nd 2005 Location: Indonesia, Jakarta Web:...

CVE-2005-1839

The CVE-2005-1839 entry documents multiple SQL injection vulnerabilities in Doug Luxem’s Liberum Help Desk 0.97.3. The flaws allow remote attackers to inject arbitrary SQL via the id parameter to three pages: view.asp, print.asp, and the edit parameter to register.asp. The NVD metrics show a CVSS...

CVE-2005-1839

Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.asp or 2 print.asp or 3 edit parameter to register.asp...

CVE-2005-1838

The CVE-2005-1838 entry concerns Liberum Help Desk 0.97.3, where multiple cross-site scripting vulnerabilities exist in castnewPost.asp. The flaw permits remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields. The NVD entry lists a Medium s...

CVE-2005-1838

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Email, 2 Title, or 3 Description fields...

CVE-2005-1838

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Email, 2 Title, or 3 Description fields...

CVE-2005-1839

Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.asp or 2 print.asp or 3 edit parameter to register.asp...

[SA13935] Help Desk Reloaded Unspecified Login Vulnerability

TITLE: Help Desk Reloaded Unspecified Login Vulnerability SECUNIA ADVISORY ID: SA13935 VERIFY ADVISORY: http://secunia.com/advisories/13935/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Help Desk Reloaded 3.x http://secunia.com/product/4545/ DESCRIPTION: A...

[Full-Disclosure] ZH2004-13SA (security advisory): Sql Injection in Help Desp Pro 2.0

26/06/2004 ZH2004-10SA security advisory: Sql Injection in Help Desp Pro 2.0 Date of discovery : 1 Giugno 2004 Date of release 26 Giugno 2004 Nome: Help Desk Pro Vulnerable Version: 2.0 non patchato Vulnerability: Sql Injection Autore: D'Amato Luigi from Zone-h Security Labs -...

CVE-2001-0232

newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters...

CVE-2001-0231

Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...

CVE-2001-0231

Summary (concrete details): CVE-2001-0231 affects News Desk 1.2, specifically the NewsDesk CGI script (newsdesk.cgi). The vulnerability arises from unsafely handling URL input passed to the open() call, allowing directory traversal via sequences like ".." in the t parameter and, per CERT notes, p...

CVE-2001-0232

newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters...

CVE-2001-0231

Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...

CVE-2001-0232

News Desk 1.2 is affected by CVE-2001-0232 via the newsdesk.cgi script, allowing remote attackers to read arbitrary files by supplying shell metacharacters. Root cause: improper handling of shell metacharacters in the CGI. Impact documented as partial confidentiality. CVSS info from NVD indicates...