2835 matches found
CVE-2005-1839
Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.asp or 2 print.asp or 3 edit parameter to register.asp...
CVE-2005-1838: Undefined Security Weakness
Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Email, 2 Title, or 3 Description fields...
CVE-2005-1839: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.asp or 2 print.asp or 3 edit parameter to register.asp...
[SA13935] Help Desk Reloaded Unspecified Login Vulnerability
TITLE: Help Desk Reloaded Unspecified Login Vulnerability SECUNIA ADVISORY ID: SA13935 VERIFY ADVISORY: http://secunia.com/advisories/13935/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Help Desk Reloaded 3.x http://secunia.com/product/4545/ DESCRIPTION: A...
[Full-Disclosure] ZH2004-13SA (security advisory): Sql Injection in Help Desp Pro 2.0
26/06/2004 ZH2004-10SA security advisory: Sql Injection in Help Desp Pro 2.0 Date of discovery : 1 Giugno 2004 Date of release 26 Giugno 2004 Nome: Help Desk Pro Vulnerable Version: 2.0 non patchato Vulnerability: Sql Injection Autore: D'Amato Luigi from Zone-h Security Labs -...
CVE-2001-0232
newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters...
CVE-2001-0231
Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...
CVE-2001-0231
Summary (concrete details): CVE-2001-0231 affects News Desk 1.2, specifically the NewsDesk CGI script (newsdesk.cgi). The vulnerability arises from unsafely handling URL input passed to the open() call, allowing directory traversal via sequences like ".." in the t parameter and, per CERT notes, p...
CVE-2001-0232
newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters...
CVE-2001-0231
Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...
CVE-2001-0232
News Desk 1.2 is affected by CVE-2001-0232 via the newsdesk.cgi script, allowing remote attackers to read arbitrary files by supplying shell metacharacters. Root cause: improper handling of shell metacharacters in the CGI. Impact documented as partial confidentiality. CVSS info from NVD indicates...
CVE-2001-0232: Undefined Security Weakness
newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters...
CVE-2001-0231: Undefined Security Weakness
Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...
News Desk newsdesk.cgi t Parameter Traversal Arbitrary File Access
The 'newsdesk.cgi' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10586;...
