Lucene search
+L

3960 matches found

Exploit DB
Exploit DB
•added 2009/11/16 12:00 a.m.•38 views

PHD Help Desk 1.43 - 'solic_display.php?q_registros' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

4.3CVSS5.8AI score0.01943EPSS
SaveExploits7
exploitpack
exploitpack
•added 2009/11/16 12:00 a.m.•20 views

PHD Help Desk 1.43 - atributo_list.php Multiple Cross-Site Scripting Vulnerabilities

PHD Help Desk 1.43 - atributolist.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data...

7AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/11/16 12:00 a.m.•27 views

PHD Help Desk 1.43 - area.php Multiple Cross-Site Scripting Vulnerabilities

PHD Help Desk 1.43 - area.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTM...

7AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/11/16 12:00 a.m.•15 views

PHD Help Desk 1.43 - area_list.php Multiple Cross-Site Scripting Vulnerabilities

PHD Help Desk 1.43 - arealist.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied...

7AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/11/16 12:00 a.m.•19 views

PHD Help Desk v1.43 Mutliple XSS

No description provided by source. Mutliple XSS in PHD Help Desk v1.43 Name Multiple vulnerabilities in PHD Help Dsk Systems Affected PHD Help Desk v1.43 and possibly earlier versions Site http://www.p-hd.com.ar/ Author Amol Naik amolnaik4atgmail.com Date 16/11/2009 1. OVERVIEW PHD Help Desk is t...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/11/16 12:00 a.m.•23 views

PHD Help Desk 1.43 - atributo.php?URL Cross-Site Scripting

PHD Help Desk 1.43 - atributo.php?URL Cross-Site Scripting source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript...

6.8AI score
SaveExploits0
zdt
zdt
•added 2009/11/16 12:00 a.m.•33 views

PHD Help Desk v1.43 Mutliple XSS

Exploit for unknown platform in category web applications ================================ PHD Help Desk v1.43 Mutliple XSS ================================ Mutliple XSS in PHD Help Desk v1.43 Name Multiple vulnerabilities in PHD Help Dsk Systems Affected PHD Help Desk v1.43 and possibly earlier...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/11/16 12:00 a.m.•29 views

PHD Help Desk 1.43 - 'atributo_list.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

4.3CVSS5.8AI score0.01943EPSS
SaveExploits7
Exploit DB
Exploit DB
•added 2009/11/16 12:00 a.m.•31 views

PHD Help Desk 1.43 - 'area_list.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

4.3CVSS5.8AI score0.01943EPSS
SaveExploits7
Exploit DB
Exploit DB
•added 2009/11/16 12:00 a.m.•27 views

PHD Help Desk 1.43 - 'atributo.php?URL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

4.3CVSS5.8AI score0.01943EPSS
SaveExploits7
Exploit DB
Exploit DB
•added 2009/11/16 12:00 a.m.•27 views

PHD Help Desk 1.43 - 'caso_insert.php?URL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

4.3CVSS5.8AI score0.01943EPSS
SaveExploits7
NVD
NVD
•added 2009/11/10 7:30 p.m.•27 views

CVE-2009-2808

Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response...

5.4CVSS7.1AI score0.00614EPSS
SaveExploits1References4
Prion
Prion
•added 2009/11/10 7:30 p.m.•24 views

Design/Logic Flaw

Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response...

5.4CVSS7AI score0.00614EPSS
SaveExploits1References4Affected Software2
Cvelist
Cvelist
•added 2009/11/10 7:00 p.m.•41 views

CVE-2009-2808

Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response...

7.1AI score0.00614EPSS
SaveExploits1References4
CVE
CVE
•added 2009/11/10 7:00 p.m.•83 views

CVE-2009-2808

CVE-2009-2808 affects Apple Mac OS X up to, but not including, 10.6.2. The Help Viewer retrieves Apple Help content over plain HTTP instead of HTTPS, allowing a man-in-the-middle to deliver a crafted help:runscript response and potentially execute arbitrary code. The impact is dependent on the ab...

5.4CVSS7.1AI score0.00614EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/11/10 12:00 a.m.•5 views

CVE-2009-2808: Undefined Security Weakness

Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response...

5.4CVSS6.2AI score0.00614EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2009/11/10 12:00 a.m.•38 views

Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities

Binary data 800795.prm...

10CVSS6.5AI score0.52988EPSS
SaveExploits40References46
Tenable Nessus
Tenable Nessus
•added 2009/11/09 12:00 a.m.•75 views

Mac OS X 10.6.x < 10.6.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.2. Mac OS X 10.6.2 contains security fixes for the following products : - Adaptive Firewall - Apache - Apache Portable Runtime - Certificate Assistant - CoreMedia - CUPS - Dovecot - fetchmail - file - FTP Server - Help...

10CVSS6.6AI score0.52988EPSS
SaveExploits36References38
Tenable Nessus
Tenable Nessus
•added 2009/11/09 12:00 a.m.•83 views

Mac OS X Multiple Vulnerabilities (Security Update 2009-006)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2009-006 applied. This security update contains fixes for the following products : - AFP Client - Adaptive Firewall - Apache - Apache Portable Runtime - ATS - Certificate Assistant - CoreGraphics - CUPS -...

10CVSS6.7AI score0.52988EPSS
SaveExploits43References46
Fedora
Fedora
•added 2009/11/04 12:31 p.m.•48 views

[SECURITY] Fedora 10 Update: yelp-2.24.0-14.fc10

Yelp is the Gnome 2 help/documentation browser. It is designed to help you browse all the documentation on your system in one central tool...

10CVSS1.6AI score0.15519EPSS
SaveExploits32
Rows per page
Query Builder