1177 matches found
CVE-2005-4428
Cross-site scripting XSS vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kbask parameter...
CVE-2005-3925
Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 detail, 2 orderdir, and 3 orderby parameters to find.php, and the 4 id parameter to issue.php...
CVE-2005-3925
CVE-2005-3925 describes multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier. The flaws allow remote attackers to execute arbitrary SQL commands through the following inputs: (1) detail[] (2) orderdir (3) orderby to find.php, and (4) id to issue....
Helpdesk Issue Manager 0.x - issue.php?id SQL Injection
Helpdesk Issue Manager 0.x - issue.php?id SQL Injection source: https://www.securityfocus.com/bid/15604/info Helpdesk Issue Manager is prone to multiple SQL injection vulnerabilities. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or m...
Helpdesk Issue Manager 0.x - find.php Multiple SQL Injections
Helpdesk Issue Manager 0.x - find.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15604/info Helpdesk Issue Manager is prone to multiple SQL injection vulnerabilities. Successful exploitation could result in a compromise of the application, disclosure or modification of data...
Helpdesk Issue Manager 0.x - 'find.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/15604/info Helpdesk Issue Manager is prone to multiple SQL injection vulnerabilities. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the...
CVE-2005-3819
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL commands and bypass authentication via the 1 username and 2 date parameter in the HelpDesk module...
CVE-2005-3819
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL commands and bypass authentication via the 1 username and 2 date parameter in the HelpDesk module...
Helpdesk Issue Manager v0.9 SQL inj.
Helpdesk Issue Manager v0.9 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/helpdesk-issue-manager-v09-sql-inj.html Vendor:http://helpdesk.centralmanclc.com/ affected vesion:v0.9 and prior Vuln. Description: Input passed to the "id"...
CVE-2004-2562
CVE-2004-2562 describes an SQL injection in Leigh Business Enterprises (LBE) Web Helpdesk’s jobedit.asp via the id parameter. Affected versions are prior to 4.0.0.81. The root cause is improper handling of the id parameter, enabling remote execution of arbitrary SQL commands (impacting confidenti...
CVE-2004-2562
SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises LBE Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2005-3502
attachmentsend.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified fileid parameter...
CVE-2005-3502
attachmentsend.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified fileid parameter...
CVE-2005-3502
The CVE-2005-3502 entry concerns Cerberus Helpdesk: the attachment_send.php component is vulnerable to an unauthorized access flaw where a modified file_id parameter lets remote attackers view attachments and tickets of other users. The available sources confirm the affected product and the acces...
cerberusDownload.txt
------=Part170374079956.1131094279524 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline hi, I have found a vulnerability in cerberus helpdesk latest stable version, caused by insufficient authentication checks and leads to access ...
CVE-2005-3005
Helpdesk Software Hesk allows remote attackers to bypass authentication for 1 admin.php and 2 adminmain.php by modifying the PHPSESSID session ID parameter or cookie...
CVE-2005-3005
Helpdesk Software Hesk allows remote attackers to bypass authentication for 1 admin.php and 2 adminmain.php by modifying the PHPSESSID session ID parameter or cookie...
CVE-2005-3005
The CVE-2005-3005 issue affects Helpdesk Software Hesk: an authentication bypass via manipulation of the PHPSESSID value (session ID) in admin.php and admin_main.php. Attackers can bypass login remotely by altering the session ID cookie/parameter to gain access without valid credentials; affected...