EUVD-2007-3138

Malware in sbrugna...

EUVD-2009-2599

Malware in sbrugna...

CVE-2009-2604

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

Sql injection

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

CVE-2009-2604

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

CVE-2009-2604

CVE-2009-2604 concerns multiple SQL injection vulnerabilities in Zen Help Desk 2.1, specifically in adminlogin.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands via the (1) userid and (2) PassWord parameters to admin.asp. The affected component is the admin login fl...

CVE-2009-2604: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

Zen Help Desk 2.1 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- ------------------------------------------------------------ Zen Help Desk Version 2.1 Auth Bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder...

Zen Help Desk 2.1 SQL Injection

--------------------------------------------------------------- ------------------------------------------------------------ Zen Help Desk Version 2.1 Auth Bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

Zen Help Desk 2.1 - Authentication Bypass

Zen Help Desk 2.1 - Authentication Bypass --------------------------------------------------------------- ------------------------------------------------------------ Zen Help Desk Version 2.1 Auth Bypass SQL Injection Vulnerability ---------------------------------------------------------------...

Zen Help Desk 2.1 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Zen Help Desk 2.1 Auth Bypass SQL Injection Vulnerability =========================================================== ------------------------------------------------------------...

Zen Help Desk 2.1 - Authentication Bypass

--------------------------------------------------------------- ------------------------------------------------------------ Zen Help Desk Version 2.1 Auth Bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

CVE-2007-3146

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...

Improper access control

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...

CVE-2007-3146

Affected product: Zen Help Desk 2.1. Vulnerability: Insufficient access control allows remote attackers to download the ZenHelpDesk.mdb database via a direct request, because sensitive information is stored under the web root. Impact (as stated): Exposure of a password-containing database. Status...

CVE-2007-3146

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...

Zen Help Desk ==> Version 2.1 Bypass/

--/ INTRODUCTION -- Advisory : Zen Help Desk == Version 2.1 Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Zen Help Desk == Version 2.1 Impact : Remote Googledork : "CopyRight 2004 Zen Help Desk" ,allintitle:Zen Help Desk or or"allinurl:trackrequest.asp" Author...

zen-mdb.txt

--/ INTRODUCTION -- Advisory : Zen Help Desk == Version 2.1 Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Zen Help Desk == Version 2.1 Impact : Remote Googledork : "CopyRight 2004 Zen Help Desk" ,allintitle:Zen Help Desk or or"allinurl:trackrequest.asp" Author...

CVE-2007-3146: Undefined Security Weakness

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...