EUVD-2009-4510

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-4543

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-4544

Cross-site scripting XSS vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-4544

The CVE-2009-4544 issue affects Cromosoft Technologies Facil Helpdesk 2.3 Lite’s kbase/kbase.php, where a Cross-site Scripting (XSS) flaw allows remote attackers to inject arbitrary web script or HTML via PATH_INFO. The NVD records a MEDIUM severity (CVSS v2 base score 4.3) with network access an...

CVE-2009-4544: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-4543: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...