3953 matches found
HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow
This module exploits a stack buffer overflow in HTML Help Workshop 4.74 by creating a specially crafted hhp file. Module Options msf use exploit/windows/fileformat/hhw/hhpcontentfilebof msf undefinedhhpcontentfilebof show actions ...actions... msf undefinedhhpcontentfilebof set ACTION msf...
Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1)
/ Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit by bratax http://www.bratax.be/ - greets to: all my miffm00f buddies, BuzzDee and everyone else I forgot who should be in here - thx to: Curt Wilson @ SIUC maybe you don't know why but this exploit wouldn't exist if we didn't have...
CVE-2006-0525
CVE-2006-0525 affects multiple Adobe products (notably Photoshop CS2, Illustrator CS2, and Adobe Help Center) where a large number of .EXE and .DLL files are installed with write-access for the Everyone group. This local-privilege-escalation vulnerability allows bypassing protections via Trojan h...
CVE-2006-0525: Undefined Security Weakness
Multiple Adobe products, including 1 Photoshop CS2, 2 Illustrator CS2, and 3 Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs...
Cerberus Help Desk < 2.7.0 Multiple Vulnerabilities
Binary data 3337.prm...
PHPGedView <= 3.3.7 remote code execution
--- PHPGedView = 3.3.7 Arbitrary local/remote code execution & php injection --- software: site: http://www.phpgedview.net/ description: "PhpGedView is a revolutionary genealogy program which allows you to view and edit your genealogy on your website." - vulnerabilties:...
Multi-Format Shellcode Encoding Tool - Beta 2.0 w32
Multi-Format Shellcode Encoding Tool - Beta v2.0 w32. Shellcode exploit for generator platform / ,sSSSis ,sSSSs, Beta v2.0 w32. iS" dP dY" ,SP Encodes binary data to/from a variety of formats. .SP dSS" ,sS" Copyright C 2003-2005 by Berend-Jan Wever dS' Sb ,sY" .SP dSSP' sSSSSSSP...
CVE-2005-4025
Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...
CVE-2005-4025
Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...
CVE-2005-4025
CVE-2005-4025 affects Help Desk Reloaded Free Help Desk. The vulnerability arises because install.php is not removed/protected after installation, enabling remote attackers to gain privileges by directly requesting install.php and then accessing accountsetup.php to create a new user. Public sourc...
CVE-2005-4025: Undefined Security Weakness
Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...
freeHelpInject.txt
------------------------------------------------------ Nightmare TeAmZ Advisory 018 ------------------------------------------------------ Date - 11/2005 Free Help Desk Software Inject Admin Account AFFECTED PRODUCTS ================= Free Help Desk http://www.helpdeskreloaded.com Overview:...
CVE-2004-2602
PHP remote file inclusion vulnerability in UberTec Help Center Live HCL before 1.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the HCLpath parameter to pipe.php...
CVE-2004-2602
CVE-2004-2602 affects UberTec Help Center Live (HCL) prior to 1.2.7. It describes a PHP remote file inclusion vulnerability that allows an attacker to execute arbitrary PHP code by passing a URL in the HCL_path parameter to pipe.php. The vulnerability arises from unsafely including user-supplied ...
CVE-2004-2603
CVE-2004-2603 is an XSS vulnerability in the Search module of UberTec Help Center Live (HCL). The flaw allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php. This description is supported by multiple sources in the connected documents referencing the s...
CVE-2004-2601
UberTec Help Center Live (HCL) is affected by a PHP remote file inclusion vulnerability (CVE-2004-2601). The issue arises from the SKIN_inner parameter in inc/skin.php, which can be manipulated via a URL to read local files and potentially execute PHP code on the server. Impact, per sources, is r...
CVE-2004-2603
Cross-site scripting XSS vulnerability in the Search module in UberTec Help Center Live HCL allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php...
CVE-2004-2601
PHP remote file inclusion vulnerability in UberTec Help Center Live HCL allows remote attackers to read local files and possibly execute PHP code via a URL in the SKINinner parameter to inc/skin.php...
CVE-2004-2602: Undefined Security Weakness
PHP remote file inclusion vulnerability in UberTec Help Center Live HCL before 1.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the HCLpath parameter to pipe.php...
CVE-2004-2601: Undefined Security Weakness
PHP remote file inclusion vulnerability in UberTec Help Center Live HCL allows remote attackers to read local files and possibly execute PHP code via a URL in the SKINinner parameter to inc/skin.php...