CVE-2005-4719

Multiple SQL injection vulnerabilities in Sysbotz Systems Panel 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the cid parameter in knowledgebase/index.php, 2 the aid parameter in knowledgebase/view.php, 3 the cid parameter in contact/update.php, 4 the letter...

CVE-2005-4719: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Sysbotz Systems Panel 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the cid parameter in knowledgebase/index.php, 2 the aid parameter in knowledgebase/view.php, 3 the cid parameter in contact/update.php, 4 the letter...

CVE-2005-4637

Multiple cross-site scripting XSS vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 nav parameter in the downloads module, 2 Full Name and 3 Email fields in the core module, 4 Full Name, 5 Email, and 6...

CVE-2005-4637: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 nav parameter in the downloads module, 2 Full Name and 3 Email fields in the core module, 4 Full Name, 5 Email, and 6...

CVE-2005-4719

Multiple SQL injection vulnerabilities in Sysbotz Systems Panel 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the cid parameter in knowledgebase/index.php, 2 the aid parameter in knowledgebase/view.php, 3 the cid parameter in contact/update.php, 4 the letter...

CVE-2005-4264

Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields, and 3 id parameter...

CVE-2005-4248

CVE-2005-4248 : Multiple cross-site scripting (XSS) vulnerabilities in QuickPayPro 3.1 allow remote attackers to inject arbitrary web script or HTML via fields in (1) communication/subscribers.tracking.add.php, (2) support/tickets.add.php, and (3) mycompany/categories.php. The description across ...

CVE-2005-4248

Multiple cross-site scripting XSS vulnerabilities in QuickPayPro 3.1 allow remote attackers to inject arbitrary web script or HTML via various fields, such as those in 1 communication/subscribers.tracking.add.php, 2 support/tickets.add.php, and 3 mycompany/categories.php...

CVE-2005-4264

CVE-2005-4264 affects PHP Support Tickets 2.0 with multiple SQL injection flaws in index.php. The vulnerability allows remote attackers to inject arbitrary SQL through the username, password, or id parameters, enabling manipulation of queries and potential authentication bypass or administrative ...

CVE-2005-4264

Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields, and 3 id parameter...

CVE-2005-4264: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields, and 3 id parameter...

PHP Support Tickets < 2.1 index.php Multiple Field SQL Injection

Binary data 3328.prm...

CVE-2005-3839

Cross-site scripting XSS vulnerability in SupportPRO Supportdesk allows remote attackers to inject arbitrary web script or HTML via the 1 post tickers and 2 view tickets options...

CVE-2005-3839: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SupportPRO Supportdesk allows remote attackers to inject arbitrary web script or HTML via the 1 post tickers and 2 view tickets options...

pdjk-support suite sql inj.

pdjk-support suite sql inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/pdjk-support-suite-sql-inj.html Vendor:http://support.pdjkeelan.com/ affected vesion: 1.1a retail edition and prior. Product Description: The pdjk-support suite is a full...

cerberusDownload.txt

------=Part170374079956.1131094279524 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline hi, I have found a vulnerability in cerberus helpdesk latest stable version, caused by insufficient authentication checks and leads to access ...

osTicketSQL.txt

GulfTech Security Research May 2nd, 2005 Vendor : osTicket URL : http://www.osticket.com/ Version : All Versions Risk : Multiple Vulnerabilities Description: osTicket is a widely-used open source support ticket system. It is a lightweight support ticket tool written mainly using PHP scripting...

CVE-2005-1932

Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical variables and 1 modify DNS settings for arbitrary domains via the domain parameter to diagnose.php, 2 close, open, or respond to arbitrary support tickets via the close, open, or...

CVE-2005-1932

CVE-2005-1932 affects Lpanel 1.59 and earlier, and other versions before 1.597. The issue allows remote authenticated users to modify certain critical variables via parameter manipulation across multiple pages: diagnose.php (modify DNS settings for arbitrary domains), view_ticket.php (close/open/...

CVSTrac Invalid Ticket DoS

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to invalid tickets that may allow an attacker to cause the application to crash. An attacker, exploiting this flaw, would be able to remotely shut down the...