CVE-2008-6380

SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...

CVE-2008-6380

CVE-2008-6380 affects Active Web Helpdesk 2.0: SQL injection in default.aspx via the CategoryID parameter that allows remote execution of arbitrary SQL commands. The vulnerability is described in multiple sources (NVD/NVD listing, CVE records). Affected component is the web application code handl...

CVE-2008-6380: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...

Active Help Desk Manager SQL Injection

--------------------------------------------------------- Portal Name: Helpdesk Manager Vendor : http://www.activewebsoftwares.com/P12ActiveWebHelpdesk.aspx?Tabopen=3 Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL...

PT-2009-43: Session predictability in Kayako Support Suite

Kayako Support Suite is a HelpDesk system...

OneOrZero Helpdesk tinfo.php Arbitrary File Upload

Binary data 4801.prm...

OneOrZero Helpdesk tinfo.php Arbitrary File Upload

The remote host is running OneOrZero Helpdesk, a web-based helpdesk application written in PHP. The version of OneOrZero HelpDesk installed on the remote host allows uploads of arbitrary files via the 'tinfo.php' script provided the 'sendemail' POST parameter is set. By uploading a file with, say...

OneOrZero helpdesk 1.6.*. Remote Shell Upload Exploit

Exploit for unknown platform in category web applications ===================================================== OneOrZero helpdesk 1.6.. Remote Shell Upload Exploit ===================================================== !/usr/bin/perl =about OneOrZero 1.6. Perl exploit AUTHOR discovered & written ...

Active Web Helpdesk 2 - categoryId Blind SQL Injection

Active Web Helpdesk 2 - categoryId Blind SQL Injection ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! !...

Active Web Helpdesk 2 - 'categoryId' Blind SQL Injection

! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOO...

Active Web Helpdesk v 2 (CategoryID) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Active Web Helpdesk v 2 CategoryID Blind SQL Injection Vulnerability ====================================================================== ! ! ! OOOO O OOOOOOOOO ! ! O...

Active Web Helpdesk v 2 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O...

Active Web Helpdesk v 2 (CategoryID) Blind SQL Injection Vulnerability

No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O...

Active Web Helpdesk 2 - Authentication Bypass

Active Web Helpdesk 2 - Authentication Bypass ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! ! OOOO...

Active Web Helpdesk v 2 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Active Web Helpdesk v 2 Auth Bypass SQL Injection Vulnerability ================================================================= ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O ...

Active Web Helpdesk 2 - Authentication Bypass

! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOO...

Cerberus Helpdesk控制器认证信息泄露漏洞

BUGTRAQ ID: 29347 Cerberus HelpDesk是一款电子邮件管理工具，可以有效而且快速的处理处理垃圾邮件、病毒邮件等。 Cerberus HelpDesk认证非标准helpdesk页面的控制器（应用中的第一个/slash命令，如/display或/kb）的方式存在漏洞，与Web接口无关的功能（如/cron）基于使用情况处理自己的认证。如果攻击者访问了某些员工端helpdesk URL的话，就可以查看文件附件消息。 Cerberus Helpdesk 4.0 Cerberus -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Unfixed XSS vulnerability at www.helpdesk.eti.br

Security researcher mygotmanoel, has submitted on 03/12/2008 a cross-site-scripting XSS vulnerability affecting www.helpdesk.eti.br, which at the time of submission ranked 64155 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is...

h2desk helpdesk path disclosure vulnerability

Heathco's h2desk helpdesk ticking system provides a ticketing solution for small and large organizations alike. Blah blah. On to the exploit. h2desk's session handling is custom and doesnt use the standard phpsession id handling. As a result, if you add a tic ' or any other invalid character to t...

[DSECRG-08-011 | FIX INFORMATION] Astrosoft HelpDesk Multiple XSS

Digital Security Research Group DSecRG Advisory DSECRG-08-011 | FIX INFORMATION Application: Astrosoft HelpDesk Versions Affected: 1.95.228 Vendor URL: http://astrosoft.ru/ Bugs: Multiple XSS Injections Exploits: YES Reported: 29.01.2008 Date of Public Advisory: 04.02.2008 Vendor response:...