1260 matches found
CVE-2007-4716
CVE-2007-4716 affects PHD Help Desk prior to 1.31, with multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. The connected documents confirm the vulnerability class (SQL injection) and the affected product/version, but do not ...
CVE-2007-4716
Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
Improper access control
Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...
CVE-2007-3146
Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...
CVE-2007-3146
Affected product: Zen Help Desk 2.1. Vulnerability: Insufficient access control allows remote attackers to download the ZenHelpDesk.mdb database via a direct request, because sensitive information is stored under the web root. Impact (as stated): Exposure of a password-containing database. Status...
CVE-2007-3146
Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...
zen-mdb.txt
--/ INTRODUCTION -- Advisory : Zen Help Desk == Version 2.1 Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Zen Help Desk == Version 2.1 Impact : Remote Googledork : "CopyRight 2004 Zen Help Desk" ,allintitle:Zen Help Desk or or"allinurl:trackrequest.asp" Author...
Zen Help Desk ==> Version 2.1 Bypass/
--/ INTRODUCTION -- Advisory : Zen Help Desk == Version 2.1 Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Zen Help Desk == Version 2.1 Impact : Remote Googledork : "CopyRight 2004 Zen Help Desk" ,allintitle:Zen Help Desk or or"allinurl:trackrequest.asp" Author...
CVE-2006-6158
Multiple cross-site scripting XSS vulnerabilities in a PMOS Help Desk 2.4, formerly b InverseFlow Help Desk 2.31 and also sold as c Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the 1 id or email parameter to ticketview.php, or 2 the email parameter to...
CVE-2006-6160
SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-6161
Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 uid parameter to a inout/status.asp, b inout/update.asp, and c forgotpass.asp. NOTE: The provenance of this information is unknown;...
CVE-2006-6160
The CVE-2006-6160 entry applies to Doug Luxem Liberum Help Desk, version 0.97.3 and earlier, where a SQL injection flaw exists in details.asp that allows remote attackers to execute arbitrary SQL commands through the id parameter. The vulnerability is verified by public records (NVD) and related ...
CVE-2006-6158
Multiple cross-site scripting XSS vulnerabilities in a PMOS Help Desk 2.4, formerly b InverseFlow Help Desk 2.31 and also sold as c Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the 1 id or email parameter to ticketview.php, or 2 the email parameter to...
CVE-2006-6158
CVE-2006-6158 affects PMOS Help Desk 2.4 (aka InverseFlow Help Desk 2.31, sold as Ace Helpdesk 2.31). The vulnerability is multiple cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via: (1) the id or email parameter to ticketview.php, or (2) the email...
CVE-2006-6161
The CVE-2006-6161 entry affects Doug Luxem’s Liberum Help Desk, specifically versions 0.97.3 and earlier. It describes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) uid parameters to (a) inout/status.asp, (b) inout/upda...
ihd231-xss.txt
XSS in scriptat support InverseFlow Help Desk v2.31 :::::::::::::::::::::::::::::::::::::::::::::::::::::: Discovered : SwEET-DeViL & viP HaCkEr & HaCkEr sUn Name scriptat: InverseFlow Help Desk v2.31 tame : AL-garnei K-S-A :::::::::::::::::::::::::::::::::::::::::::::::::::::: 1 in ticketview.ph...
Liberum Help Desk <= 0.97.3 (details.asp) SQL Injection Vulnerability
No description provided by source. Title : Liberum Help Desk = 0.97.3 details.asp Remote SQL Injection Vulnerability Author : ajann Contact : : Dork : "Liberum Help Desk, Copyright C 2001 Doug Luxem. Please view the license http://target/path//details.asp?id=SQL Example:...
Liberum Help Desk <= 0.97.3 (details.asp) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Liberum Help Desk All Password Changed to "kro" """"""""""""""""""""" ajann,Turkey ... Im not Hacker! 0day.today 2017-12-31...
