KDE -- multiple vulnerabilities

oCERT reports: Ark input sanitization errors: The KDE archiving tool, Ark, performs insufficient validation which leads to specially crafted archive files, using unknown MIME types, to be rendered using a KHTML instance, this can trigger uncontrolled XMLHTTPRequests to remote sites. IO Slaves inp...

CVE-2009-3745: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the ReqWeb Help feature aka the Web Client Help system in IBM Rational RequisitePro 7.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the operation parameter to ReqWebHelp/advanced/workingSet.jsp, or the 2 searchWord, 3...

CVE-2009-3730

Multiple cross-site scripting XSS vulnerabilities in the ReqWeb Help feature aka the Web Client Help system in IBM Rational RequisitePro 7.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the operation parameter to ReqWebHelp/advanced/workingSet.jsp, or the 2 searchWord, 3...

CVE-2009-3730: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the ReqWeb Help feature aka the Web Client Help system in IBM Rational RequisitePro 7.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the operation parameter to ReqWebHelp/advanced/workingSet.jsp, or the 2 searchWord, 3...

PHP Live! Detection

This host is running PHP Live!. PHP Live! enables live help and live customer support communication directly from a website. OpenVAS Vulnerability Test $Id: phplivedetect.nasl 5739 2017-03-27 14:48:05Z cfi $ PHP Live! Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks...

Microsoft showHelp (MS04-023; CVE-2003-1041)

An HTML Help URI provides a link to a compiled help file .chm. When a user references this link, Windows will access the resource. To launch the Help URI with the local HTML Help Windows application, the method showHelp can be used. There is a vulnerability in the way Microsoft's HTML help system...

Solaris 10 (x86) : 122471-05 (deprecated)

GNOME 2.6.0x86: GNOME Java Help Patch. Date this patch was last updated by Sun : Jul/09/10 This plugin has been deprecated and either replaced with individual 122471 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

CVE-2009-2742

Cross-site scripting XSS vulnerability in Eclipse Help in IBM WebSphere Application Server WAS 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input...

CVE-2009-2742

Cross-site scripting XSS vulnerability in Eclipse Help in IBM WebSphere Application Server WAS 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input...

CVE-2009-2742

IBM WebSphere Application Server 6.1 before 6.1.0.27 is affected by a cross-site scripting (XSS) vulnerability in the Eclipse Help component. The root cause is insufficient validation of input in Eclipse Help, allowing remote attackers to inject arbitrary script/HTML via unspecified input. Affect...

IBM WebSphere Application Server Eclipse Help跨站脚本漏洞

Bugraq ID: 36455 CVE ID：CVE-2009-2742 IBM WebSphere Application Server是一款商业性质的WEB应用服务程序。 IBM WebSphere Application Server包含的Eclipse Help组件不正确验证用户提供的输入，远程攻击者可以利用漏洞使用特殊构建的URL，诱使用户点击，可在目标用户浏览器上执行任意脚本代码。 目前没有详细漏洞细节提供。 IBM Websphere Application Server 6.1 25 IBM Websphere Application Server 6.1 23 IBM...

CVE-2009-2742: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Eclipse Help in IBM WebSphere Application Server WAS 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input...

Three Pillars Help Desk 3 SQL Injection

-------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] ------------------------------------------------------- Script:He...

Three Pillars Help Desk 3.0 - Authentication Bypass

Three Pillars Help Desk 3.0 - Authentication Bypass -------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

Three Pillars Help Desk v3 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

Three Pillars Help Desk 3.0 - Authentication Bypass

-------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] ------------------------------------------------------- Script:He...

Three Pillars Help Desk v3 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Three Pillars Help Desk v3 Auth Bypass SQL Injection Vulnerability ====================================================================...

CVE-2008-7146: Exposure of Sensitive Information to an Unauthorized Actor

IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allows remote attackers to obtain sensitive information via a direct request to 1 KnowledgeImpactCourse.htm, 2 LRN-formattedCourse.htm, or 3 CreateCourse.htm in help/1/Instructor/, which reveals the installation path in...

CVE-2008-6972: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Drupal Content Construction Kit CCK 5.x through 5.x-1.8 allow remote authenticated users with "administer content" permissions to inject arbitrary web script or HTML via the 1 "field label," 2 "help text," or 3 "allowed values" settings...