CVE-2005-4025

CVE-2005-4025 affects Help Desk Reloaded Free Help Desk. The vulnerability arises because install.php is not removed/protected after installation, enabling remote attackers to gain privileges by directly requesting install.php and then accessing accountsetup.php to create a new user. Public sourc...

CVE-2005-4025: Undefined Security Weakness

Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...

[SA13935] Help Desk Reloaded Unspecified Login Vulnerability

TITLE: Help Desk Reloaded Unspecified Login Vulnerability SECUNIA ADVISORY ID: SA13935 VERIFY ADVISORY: http://secunia.com/advisories/13935/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Help Desk Reloaded 3.x http://secunia.com/product/4545/ DESCRIPTION: A...

Plesk Reloaded login_up.php3 login_name Parameter XSS

The remote host is running Plesk Reloaded from SWsoft, a web-based system administration tool. The remote version of this software is vulnerable to a cross-site scripting attack because of its failure to sanitize user input to the 'loginname' parameter of the 'loginup.php3' script. This issue can...

SWsoft Plesk Reloaded 7.1 - Login_name Cross-Site Scripting

SWsoft Plesk Reloaded 7.1 - Loginname Cross-Site Scripting source: https://www.securityfocus.com/bid/11024/info It is reported that Plesk Reloaded may be affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI inpu...

SWsoft Plesk Reloaded 7.1 - 'Login_name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11024/info It is reported that Plesk Reloaded may be affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a...