PMOS Help Desk form.php Arbitrary Code Execution

The remote host is running PMOS Help Desk, an open source help desk application written in PHP. The version of PMOS Help Desk installed on the remote host contains a design flaw that can be leveraged by a remote attacker to bypass authentication and make changes to the application's form template...

PMOS Help Desk 2.4 - Remote Command Execution

?php / ------------------------------------------------------ PMOS Help Desk = 2.4 Remote Command Execution Exploit ------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.h2desk.com/pmos dork.....: "Powered by PMOS Help Desk" ...

PMOS Help Desk <= 2.4 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ====================================================== PMOS Help Desk = 2.4 Remote Command Execution Exploit ====================================================== ?php / ------------------------------------------------------ PMOS Help Des...

PMOS Help Desk 2.4 - Remote Command Execution

PMOS Help Desk 2.4 - Remote Command Execution ?php / ------------------------------------------------------ PMOS Help Desk = 2.4 Remote Command Execution Exploit ------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action...

CVE-2007-5949

Cross-site scripting XSS vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action...

CVE-2007-5949

Cross-site scripting XSS vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action...

CVE-2007-5949

CVE-2007-5949 describes a cross-site scripting (XSS) vulnerability in IBM Tivoli Service Desk 6.2. The issue allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action. Administrative or user impact is limited to the authentica...

CVE-2007-5949: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action...

omnistar-xss.txt

HSC Omnistar Live Software Cross-Site Scripting Vulrnability Omnistar Live is web based PHP help desk software used by webmasters that combines live chat and helpdesk software in one easy to use solution. Our customer service software combines ticketed support web and email based, live chat and a...

Omnistar Live Software Cross-Site Scripting Vulrnability

HSC Omnistar Live Software Cross-Site Scripting Vulrnability Omnistar Live is web based PHP help desk software used by webmasters that combines live chat and helpdesk software in one easy to use solution. Our customer service software combines ticketed support web and email based, live chat and a...

Sql injection

Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-4716

Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-4716

CVE-2007-4716 affects PHD Help Desk prior to 1.31, with multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. The connected documents confirm the vulnerability class (SQL injection) and the affected product/version, but do not ...

CVE-2007-4716

Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-4716: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

Improper access control

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...

CVE-2007-3146

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...

CVE-2007-3146

Affected product: Zen Help Desk 2.1. Vulnerability: Insufficient access control allows remote attackers to download the ZenHelpDesk.mdb database via a direct request, because sensitive information is stored under the web root. Impact (as stated): Exposure of a password-containing database. Status...

CVE-2007-3146

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...