PT-2005-5410 · Webhost Automation · Helm

Name of the Vulnerable Software and Affected Versions: WebHost Automation Ltd Helm versions prior to 3.2.6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. The estimated number of potentially affected devices worldwide is not available...

CVE-2004-1499

Cross-site scripting XSS vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field...

CVE-2004-1499

HELM 3.1.19 and earlier are affected by a Cross-site scripting (XSS) vulnerability in the compose message form (Subject field). The issue allows remote attackers to execute arbitrary web script or HTML. The CVE-2004-1499 entry cites a base score of 4.3 (Medium) per NVD, but the provided documents...

CVE-2004-1498

CVE-2004-1498 describes a SQL injection in the compose message form of HELM up to version 3.1.19, exploitable via the messageToUserAccNum parameter. The issue allows remote attackers to run arbitrary SQL commands. Affected: HELM 3.1.19 and earlier (HELM frontend/compose logic). Root cause: unsafe...

CVE-2004-1498

SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter...

CVE-2004-1498

SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter...

CVE-2004-1499

Cross-site scripting XSS vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field...

Helm Control Panel < 3.1.20 Multiple Input Validation Vulnerabilities

Binary data 2390.prm...

[Hat-Squad] SQL injection and XSS Vulnerabilities in HELM

Hat-Squad Advisory: SQL injection and XSS Vulnerabilities in HELM November 2, 2004 Product: HELM Web Hosting Control Panel Vendor URL: http://helm.webhostautomation.com Version: HELM 3.1.19 and lower Vulnerability: SQL injection and XSS Release Date: November 2, 2004 Vendor Status: Informed on 28...