php Help Agent <= 1.1 (content) Local File Inclusion Vulnerability

No description provided by source. Author : BeyazKurt Contact : [email protected] Script : php Help Agent v1.1 Full & 1.0 Risk : Local File Include Download : http://sourceforge.net/projects/phphelpagent/ File : include/headchat.inc.php Code : ?php iffileexists$content include$content; ? Exploi...

Stardevelop Live Help 2.6 'SERVER' Parameter Multiple Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/37558/info Stardevelop Live Help is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute...

Hesk Help Desk 2.1 - CSRF

No description provided by source...

Kayako eSupport 3.70.02 - SQL Injection Vulnerability

No description provided by source. Name :Kayako eSupport v3.70.02 SQL Injection Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.kayako.com/solutions/esupport/ google dork:Help Desk Software by Kayako SupportSuite v3.70.02 Author : Sid3^effects aKa HaRi special thank...

Cartweaver 3 Local File Inclusion Vulnerability

No description provided by source. Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8 Vulnerability is in the He...

PHD Help Desk 1.43 atributo_list.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the...

Microsoft Windows 95/98/2000/NT4 WinHlp Item Buffer Overflow Vulnerability

... HTML帮助ActiveX控件Hhctrl.ocx由Microsoft HTML Help附带，设计用于与Internet Explorer一起提供帮助功能。 ... HTML帮助ActiveX控件存在漏洞，可导致远程攻击者进行拒绝服务攻击。 ... HTML帮助ActiveX控件存在基于栈和堆的缓冲区溢出，攻击者可以构建包含恶意数据的Web页面，当用户浏览此链接时，可导致拒绝服务攻击，精心构建提交数据可导致以SYSTEM的权限在客户端系统上执行任意命令。...

PHD Help Desk 1.43 solic_display.php q_registros Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the...

Microsoft Help Center XSS and Command Execution

No description provided by source. $Id: ms10042helpctrxsscmdexec.rb 10388 2010-09-20 04:37:25Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

MS Windows XP/2000/NT 4 Help Facility ActiveX Control Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/5874/info The ActiveX control that provides much of the functionality for the Windows Help Center contains an unchecked buffer. Successful exploitation could result in execution of arbitrary code in the security context o...

Remote Help HTTP 0.0.7 GET Request Format String Denial Of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38875/info Remote Help is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Due to the nature of this issue arbitra...

Apple Mac OS X 10.3.x Help Protocol Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10356/info It has been reported that Mac OS X may be prone to a vulnerability that could allow a remote attacker to execute arbitrary script code on a vulnerable system. The issue presents itself due to the 'help:' protoc...

Three Pillars Help Desk 3.0 - (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

Miniweb 2.0 Business Portal and Social Networking Platform SQL Injection

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Miniweb 2.0 Business Portal and Social Networking Platform SQL Injection Vulnerability Vendor url:http://www.miniweb2.com/ Version:2.0 Price:250$ Published: 2010-06-10 Greetz to:Sid3^effects, MaYu...

Apple Mac OS X 10.4.x iMovie HD .imovieproj Filename Format String

No description provided by source. source: http://www.securityfocus.com/bid/22326/info Multiple products for Mac OS X are prone to multiple remote format-string vulnerabilities. The affected applications include Help Viewer, Safari, iPhoto, and iMovie. Exploiting these issues can allow...

bitrix site manager 4.0.5 - Remote File Inclusion Vulnerability

No description provided by source. + Author : Don Tukulesto [email protected] + Date : November 13, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : http://www.bitrixsoft.com/ + Method : Remote File Inclusion + Location : INDONESIA Notes : I know this is an old bugs, but i just...

microsoft windows xp/2000/2003 help Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/19490/info The Microsoft Windows Help File viewer winhlp32.exe is prone to multiple remote vulnerabilities. These vulnerabilities present themselves when the application handles specially crafted Windows Help .hlp files. ...

Help Center Live 1.0/1.2.x Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13666/info Help Center Live is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Reportedly the application is affected by...

Horde <= 3.0.9, 3.1.0 (Help Viewer) Remote Code Execution (metasploit)

No description provided by source. Title: Horde = 3.0.9, 3.1.0 Help Viewer Remote PHP Code Execution Vulnerability Name: hordehelpmodule.pm License: Artistic/BSD/GPL Info: Trying to get the command execution exploits out of the way on milw0rm.com. M's are always good. - This is an exploit module...

Online Work Order System (OWOS) Professional Edition Authentication Bypass

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Onlinetechtools OWOS: Professional Edition? Authentication Bypass Vulnerability Version:2.10 Price:900$ Vendor url:http://www.onlinetechtools.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.co...