CVE-2010-0333: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Helpdesk mghelp extension 1.1.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the categoryid parameter to 1 products.php, 2 article.php, 3 productdetails.php, or 4 reviews.php; the 5 forumid parameter to forum.php; or the 6...

Cross site scripting

Cross-site scripting XSS vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-4543

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-4544

Cross-site scripting XSS vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-4548

Multiple cross-site scripting XSS vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the categoryid parameter to 1 products.php, 2 article.php, 3 productdetails.php, or 4 reviews.php; the 5 forumid parameter to forum.php; or the 6...

CVE-2009-4543

CVE-2009-4543 affects Cromosoft Technologies Facil Helpdesk 2.3 Lite. The issue is a PHP remote file inclusion in index.php via the lng parameter, which can also be triggered to include and execute local files through .. sequences. Documented impact is arbitrary PHP code execution with network ac...

CVE-2009-4548

ViArt Helpdesk 3.x is affected by multiple cross-site scripting (XSS) vulnerabilities. The issue can be triggered by user-supplied input in several parameters: category_id to products.php, article.php, product_details.php, or reviews.php; forum_id to forum.php; and search_category_id to products_...

CVE-2009-4544

Cross-site scripting XSS vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-4548

Multiple cross-site scripting XSS vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the categoryid parameter to 1 products.php, 2 article.php, 3 productdetails.php, or 4 reviews.php; the 5 forumid parameter to forum.php; or the 6...

CVE-2009-4544

The CVE-2009-4544 issue affects Cromosoft Technologies Facil Helpdesk 2.3 Lite’s kbase/kbase.php, where a Cross-site Scripting (XSS) flaw allows remote attackers to inject arbitrary web script or HTML via PATH_INFO. The NVD records a MEDIUM severity (CVSS v2 base score 4.3) with network access an...

CVE-2009-4544: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

Helpdesk Pilot Knowledge Base SQL injection vulnerability - (article_id)

No description provided by source. Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version :...

CVE-2009-4543: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-4548: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the categoryid parameter to 1 products.php, 2 article.php, 3 productdetails.php, or 4 reviews.php; the 5 forumid parameter to forum.php; or the 6...

Helpdesk Pilot Knowledge Base SQL Injection

Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version : 4.4.0 or lower maybe also affected ...

Helpdesk Pilot Knowledge Base SQL injection vulnerability

No description provided by source. Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version :...

Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection

Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version : 4.4.0 or lower maybe also affected ...

Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection

Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download...

Helpdesk Pilot Knowledge Base SQL injection vulnerability

Exploit for unknown platform in category web applications ========================================================= Helpdesk Pilot Knowledge Base SQL injection vulnerability ========================================================= Software Information + Vendor : http://www.helpdeskpilot.com/ +...