Unfixed XSS vulnerability at www.psy-help-online.ch

Security researcher Fabian Fingerle, has submitted on 28/07/2009 a cross-site-scripting XSS vulnerability affecting www.psy-help-online.ch, which at the time of submission ranked 23248220 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CVE-2009-2604

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

Sql injection

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

CVE-2009-2604

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

CVE-2009-2604

CVE-2009-2604 concerns multiple SQL injection vulnerabilities in Zen Help Desk 2.1, specifically in adminlogin.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands via the (1) userid and (2) PassWord parameters to admin.asp. The affected component is the admin login fl...

CVE-2009-2604: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

PHP Live! 3.2.2 SQL Injection

Original author: Found by Xar of h4ck-y0u, Greets to Don & ViSiOn Modified version: skys Contact: skysbsbatgmail.com !Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance i...

PHP Live! 3.2.2 - questid SQL Injection (2)

PHP Live! 3.2.2 - questid SQL Injection 2 Original author: Found by Xar of h4ck-y0u, Greets to Don & ViSiOn Modified version: skys Contact: skysbsbatgmail.com !Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, y...

Update Protection against Adobe RoboHelp Server SQL Injection Vulnerability

Adobe RoboHelp Server is vulnerable to a SQL injection attack. A remote attacker can trigger this vulnerability by sending a specially crafted URL to a vulnerable installation of RoboHelp Server. An attacker would need to have access to the RoboHelp Help Errors log, or convince someone with acces...

[SECURITY] Fedora 10 Update: yelp-2.24.0-11.fc10

Yelp is the Gnome 2 help/documentation browser. It is designed to help you browse all the documentation on your system in one central tool...

CVE-2009-2283: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1708

Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote attackers to open arbitrary local help files, and execute arbitrary code or obtain sensitive information, via a crafted call...

CVE-2009-1708: Undefined Security Weakness

Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote attackers to open arbitrary local help files, and execute arbitrary code or obtain sensitive information, via a crafted call...

XM Easy Personal FTP Server DoS

Buffer overflow on HELP and TYPE commands...

CVE-2009-1844

Multiple cross-site scripting XSS vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow 1 remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the...

CVE-2009-1844: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow 1 remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the...

Zen Help Desk 2.1 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- ------------------------------------------------------------ Zen Help Desk Version 2.1 Auth Bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder...

Zen Help Desk 2.1 SQL Injection

--------------------------------------------------------------- ------------------------------------------------------------ Zen Help Desk Version 2.1 Auth Bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

Zen Help Desk 2.1 - Authentication Bypass

Zen Help Desk 2.1 - Authentication Bypass --------------------------------------------------------------- ------------------------------------------------------------ Zen Help Desk Version 2.1 Auth Bypass SQL Injection Vulnerability ---------------------------------------------------------------...

Zen Help Desk 2.1 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Zen Help Desk 2.1 Auth Bypass SQL Injection Vulnerability =========================================================== ------------------------------------------------------------...