CVE-2009-4548

Multiple cross-site scripting XSS vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the categoryid parameter to 1 products.php, 2 article.php, 3 productdetails.php, or 4 reviews.php; the 5 forumid parameter to forum.php; or the 6...

CVE-2009-4544

The CVE-2009-4544 issue affects Cromosoft Technologies Facil Helpdesk 2.3 Lite’s kbase/kbase.php, where a Cross-site Scripting (XSS) flaw allows remote attackers to inject arbitrary web script or HTML via PATH_INFO. The NVD records a MEDIUM severity (CVSS v2 base score 4.3) with network access an...

CVE-2009-4543

CVE-2009-4543 affects Cromosoft Technologies Facil Helpdesk 2.3 Lite. The issue is a PHP remote file inclusion in index.php via the lng parameter, which can also be triggered to include and execute local files through .. sequences. Documented impact is arbitrary PHP code execution with network ac...

CVE-2009-4548

ViArt Helpdesk 3.x is affected by multiple cross-site scripting (XSS) vulnerabilities. The issue can be triggered by user-supplied input in several parameters: category_id to products.php, article.php, product_details.php, or reviews.php; forum_id to forum.php; and search_category_id to products_...

Helpdesk Pilot Knowledge Base SQL injection vulnerability - (article_id)

No description provided by source. Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version :...

CVE-2009-4548: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the categoryid parameter to 1 products.php, 2 article.php, 3 productdetails.php, or 4 reviews.php; the 5 forumid parameter to forum.php; or the 6...

CVE-2009-4544: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-4543: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

Helpdesk Pilot Knowledge Base SQL Injection

Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version : 4.4.0 or lower maybe also affected ...

Helpdesk Pilot Knowledge Base SQL injection vulnerability

Exploit for unknown platform in category web applications ========================================================= Helpdesk Pilot Knowledge Base SQL injection vulnerability ========================================================= Software Information + Vendor : http://www.helpdeskpilot.com/ +...

Helpdesk Pilot Knowledge Base SQL injection vulnerability

No description provided by source. Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version :...

Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection

Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download...

Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection

Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version : 4.4.0 or lower maybe also affected ...

Green Desktiny - Customer Support Helpdesk SQL injection vulnerability

Exploit for unknown platform in category web applications ====================================================================== Green Desktiny - Customer Support Helpdesk SQL injection vulnerability ====================================================================== Software Information +...

Green Desktiny - Customer Support Helpdesk SQL injection vulnerability

No description provided by source. Green Desktiny - Customer Support Helpdesk SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 25, 2009 Software Information + Vendor : http://www.greendesktiny.com/ + Download : - +...

Green Desktiny Customer Support Helpdesk 2.3.1 - SQL Injection

Green Desktiny Customer Support Helpdesk 2.3.1 - SQL Injection Green Desktiny - Customer Support Helpdesk SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 25, 2009 Software Information + Vendor :...

Green Desktiny Customer Support Helpdesk 2.3.1 - SQL Injection

Green Desktiny - Customer Support Helpdesk SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 25, 2009 Software Information + Vendor : http://www.greendesktiny.com/ + Download : - + version : 2.3.1 or lower maybe also...

ViArt Helpdesk - product_details.php?category_id Cross-Site Scripting

ViArt Helpdesk - productdetails.php?categoryid Cross-Site Scripting source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

ViArt Helpdesk - products.php?category_id Cross-Site Scripting

ViArt Helpdesk - products.php?categoryid Cross-Site Scripting source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

ViArt Helpdesk - forum.php?forum_id Cross-Site Scripting

ViArt Helpdesk - forum.php?forumid Cross-Site Scripting source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitra...