cerberusHelp.txt

Title: Cerberus Helpdesk multiple vulnerabilities. Severity: Medium Affected: cerberus-gui 2.649, support-center 2.6493.2.0pr2 Problem type: remote Author: Alejandro Ramos Description: ------------------------------------------------------------------------------- Cerberus Helpdesk is a WebGroup...

CVE-2005-3838

Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 lorder, 2 Priority, 3 Status, 4 Category, 5 searchvalue, and 6 field parameter...

CVE-2005-3838

The CVE-2005-3838 issue affects IsolSoft Support Center 2.2 and earlier. Multiple SQL injection vulnerabilities exist in search.php, exploitable via the parameters (1) lorder, (2) Priority, (3) Status, (4) Category, (5) searchvalue, and (6) field to execute arbitrary SQL commands remotely. The pr...

CVE-2005-3838

Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 lorder, 2 Priority, 3 Status, 4 Category, 5 searchvalue, and 6 field parameter...

IsolSoft Support Center 2.2 - Multiple SQL Injections

IsolSoft Support Center 2.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/15570/info Support Center is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

IsolSoft Support Center 2.2 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15570/info Support Center is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromi...

IsolSoft Support Center SQL inj.

IsolSoft Support Center SQL inj. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/isolsoft-support-center-sql-inj.html Vendor:http://www.isolsoft.com/ affected version:Support Center v2.2 and prior Vuln. Desciption: Input passed to the "field"...

CVE-2003-0009

CVE-2003-0009 is an XSS vulnerability in the Help and Support Center (HSC) of Windows Me (and XP) where hcp:// URIs pass arbitrary script in the topic parameter. The CERT/CC entry and CERT/CC notes explain that HSC does not adequately validate hcp:// URI parameters, allowing an attacker to cause ...

CVE-2002-0974

Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses uplddrvinfo.htm...

CVE-2004-0199

Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability dvdupgrd.htm...

PT-2004-1176 · Microsoft · Windows Xp

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP version SP1 Description: The issue concerns the Help and Support Center in Microsoft Windows XP, which fails to properly validate HCP URLs. This allows remote attackers to execute arbitrary code by using quotation marks i...

[Full-Disclosure] Microsoft Help and Support Center argument injection vulnerability

OVERVIEW ======== "Help and Support Center HSC is a feature in Windows that provides help on a variety of topics" from www.microsoft.com. It can be accessed via HCP: URLs. HSC is installed by default on Windows XP and Windows Server 2003 systems. An argument injection vulnerability in HSC allows ...

Microsoft Windows Help and Support Center (HCP) fails to validate HCP URLs

Overview A remotely exploitable vulnerability exists in the Help and Support Center HCP. An attacker could compromise the victim's system by tricking them into visiting a malicious web site, or viewing a malicious email message. Description A failure to filter special characters, such as quotes,...

Microsoft Windows Help And Support Center URI Validation Code Execution Vulnerability

Description Microsoft has reported a vulnerability in the Help and Support Center that is related to how HCP URIs are validated. This issue could reportedly be exploited via a malicious web page or HTML e-mail to execute arbitrary code on a client system. The issue may permit an attacker to injec...

Microsoft Windows XP - Help and Support Center Interface Spoofing

Microsoft Windows XP - Help and Support Center Interface Spoofing source: https://www.securityfocus.com/bid/9685/info A weakness has been alleged in Microsoft Windows XP that could reportedly allow aspects of the Help and Support Center interface to be spoofed via a malicious link. By spoofing th...

Microsoft Windows XP - Help and Support Center Interface Spoofing

source: https://www.securityfocus.com/bid/9685/info A weakness has been alleged in Microsoft Windows XP that could reportedly allow aspects of the Help and Support Center interface to be spoofed via a malicious link. By spoofing this interface, an attacker could potentially present misleading or...

CVE-2003-0711

Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remote attackers to execute arbitrary code via a long query in an HCP URL...

Microsoft Windows Help and Support Center buffer overflow

Buffer overflow on hcp:// protocol handling...

Microsoft Help and Support Center contains buffer overflow in code used to handle HCP protocol

Overview There is a buffer overflow in the Microsoft Help and Support Center that could permit an attacker to execute arbitrary code with SYSTEM privileges. Description The Microsoft Help and Support Center is a facility within WIndows to provide product help and documentation. Among other things...

Microsoft Windows Me and XP Help and Support Center does not adequately validate hcp:// URI parameters

Overview The Help and Support Center included with Microsoft Windows Millennium Edition and XP does not adequately validate parameters provided in an "hcp://" URI. As a result, an attacker could construct a URI that could cause the Help and Support Center to execute arbitrary script, effectively...