CVE-2009-4047

CVE-2009-4047 encompasses multiple cross-site scripting (XSS) vulnerabilities in PHD Help Desk 1.43. The flaws enable remote attackers to inject arbitrary web script or HTML via numerous parameters to area.php, area_list.php, atributo_list.php, solic_display.php, and caso_insert.php (including PA...

CVE-2009-4047: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHD Help Desk 1.43 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to area.php; the 2 pagina, 3 sentido, 4 qregistros, and 5 orden parameters to area.php; 6 the qregistros parameter to solicdisplay.php; 7 the...

PHD Help Desk 1.43 Cross Site Scripting

Mutliple XSS in PHD Help Desk v1.43 Name Multiple vulnerabilities in PHD Help Dsk Systems Affected PHD Help Desk v1.43 and possibly earlier versions Site http://www.p-hd.com.ar/ Author Amol Naik amolnaik4atgmail.com Date 16/11/2009 1. OVERVIEW PHD Help Desk is the software conceived for the...

PHD Help Desk 1.43 - solic_display.php?q_registros Cross-Site Scripting

PHD Help Desk 1.43 - solicdisplay.php?qregistros Cross-Site Scripting source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or...

PHD Help Desk 1.43 - caso_insert.php?URL Cross-Site Scripting

PHD Help Desk 1.43 - casoinsert.php?URL Cross-Site Scripting source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript...

PHD Help Desk 1.43 - 'solic_display.php?q_registros' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

PHD Help Desk 1.43 - atributo_list.php Multiple Cross-Site Scripting Vulnerabilities

PHD Help Desk 1.43 - atributolist.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data...

PHD Help Desk 1.43 - area.php Multiple Cross-Site Scripting Vulnerabilities

PHD Help Desk 1.43 - area.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTM...

PHD Help Desk 1.43 - area_list.php Multiple Cross-Site Scripting Vulnerabilities

PHD Help Desk 1.43 - arealist.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied...

PHD Help Desk v1.43 Mutliple XSS

No description provided by source. Mutliple XSS in PHD Help Desk v1.43 Name Multiple vulnerabilities in PHD Help Dsk Systems Affected PHD Help Desk v1.43 and possibly earlier versions Site http://www.p-hd.com.ar/ Author Amol Naik amolnaik4atgmail.com Date 16/11/2009 1. OVERVIEW PHD Help Desk is t...

PHD Help Desk v1.43 Mutliple XSS

Exploit for unknown platform in category web applications ================================ PHD Help Desk v1.43 Mutliple XSS ================================ Mutliple XSS in PHD Help Desk v1.43 Name Multiple vulnerabilities in PHD Help Dsk Systems Affected PHD Help Desk v1.43 and possibly earlier...

PHD Help Desk 1.43 - atributo.php?URL Cross-Site Scripting

PHD Help Desk 1.43 - atributo.php?URL Cross-Site Scripting source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript...

PHD Help Desk 1.43 - 'area_list.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

PHD Help Desk 1.43 - 'atributo.php?URL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

PHD Help Desk 1.43 - 'atributo_list.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

PHD Help Desk 1.43 - 'caso_insert.php?URL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

Three Pillars Help Desk 3 SQL Injection

-------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] ------------------------------------------------------- Script:He...

Three Pillars Help Desk v3 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

Three Pillars Help Desk 3.0 - Authentication Bypass

Three Pillars Help Desk 3.0 - Authentication Bypass -------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

Three Pillars Help Desk 3.0 - Authentication Bypass

-------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] ------------------------------------------------------- Script:He...