omnistar-xss.txt

HSC Omnistar Live Software Cross-Site Scripting Vulrnability Omnistar Live is web based PHP help desk software used by webmasters that combines live chat and helpdesk software in one easy to use solution. Our customer service software combines ticketed support web and email based, live chat and a...

Omnistar Live Software Cross-Site Scripting Vulrnability

HSC Omnistar Live Software Cross-Site Scripting Vulrnability Omnistar Live is web based PHP help desk software used by webmasters that combines live chat and helpdesk software in one easy to use solution. Our customer service software combines ticketed support web and email based, live chat and a...

CVE-2007-4716

Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-4716

Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-4716

CVE-2007-4716 affects PHD Help Desk prior to 1.31, with multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. The connected documents confirm the vulnerability class (SQL injection) and the affected product/version, but do not ...

Improper access control

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...

CVE-2007-3146

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...

CVE-2007-3146

Affected product: Zen Help Desk 2.1. Vulnerability: Insufficient access control allows remote attackers to download the ZenHelpDesk.mdb database via a direct request, because sensitive information is stored under the web root. Impact (as stated): Exposure of a password-containing database. Status...

CVE-2007-3146

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...

Zen Help Desk ==> Version 2.1 Bypass/

--/ INTRODUCTION -- Advisory : Zen Help Desk == Version 2.1 Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Zen Help Desk == Version 2.1 Impact : Remote Googledork : "CopyRight 2004 Zen Help Desk" ,allintitle:Zen Help Desk or or"allinurl:trackrequest.asp" Author...

zen-mdb.txt

--/ INTRODUCTION -- Advisory : Zen Help Desk == Version 2.1 Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Zen Help Desk == Version 2.1 Impact : Remote Googledork : "CopyRight 2004 Zen Help Desk" ,allintitle:Zen Help Desk or or"allinurl:trackrequest.asp" Author...

CVE-2006-6161

Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 uid parameter to a inout/status.asp, b inout/update.asp, and c forgotpass.asp. NOTE: The provenance of this information is unknown;...

CVE-2006-6158

Multiple cross-site scripting XSS vulnerabilities in a PMOS Help Desk 2.4, formerly b InverseFlow Help Desk 2.31 and also sold as c Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the 1 id or email parameter to ticketview.php, or 2 the email parameter to...

CVE-2006-6160

SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6158

CVE-2006-6158 affects PMOS Help Desk 2.4 (aka InverseFlow Help Desk 2.31, sold as Ace Helpdesk 2.31). The vulnerability is multiple cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via: (1) the id or email parameter to ticketview.php, or (2) the email...

CVE-2006-6158

Multiple cross-site scripting XSS vulnerabilities in a PMOS Help Desk 2.4, formerly b InverseFlow Help Desk 2.31 and also sold as c Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the 1 id or email parameter to ticketview.php, or 2 the email parameter to...

CVE-2006-6160

The CVE-2006-6160 entry applies to Doug Luxem Liberum Help Desk, version 0.97.3 and earlier, where a SQL injection flaw exists in details.asp that allows remote attackers to execute arbitrary SQL commands through the id parameter. The vulnerability is verified by public records (NVD) and related ...

CVE-2006-6161

The CVE-2006-6161 entry affects Doug Luxem’s Liberum Help Desk, specifically versions 0.97.3 and earlier. It describes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) uid parameters to (a) inout/status.asp, (b) inout/upda...

ihd231-xss.txt

XSS in scriptat support InverseFlow Help Desk v2.31 :::::::::::::::::::::::::::::::::::::::::::::::::::::: Discovered : SwEET-DeViL & viP HaCkEr & HaCkEr sUn Name scriptat: InverseFlow Help Desk v2.31 tame : AL-garnei K-S-A :::::::::::::::::::::::::::::::::::::::::::::::::::::: 1 in ticketview.ph...