3979 matches found
Wiki Web Help 0.3.9 - Multiple Persistent Cross-Site Scripting Vulnerabilities
Wiki Web Help 0.3.9 - Multiple Persistent Cross-Site Scripting Vulnerabilities Exploit Title: Multiple Stored XSS Vulnerabilities in Wiki Web Help. Date: 23/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://wikiwebhelp.org Software Link:...
Wiki Web Help 0.3.9 - Multiple Persistent Cross-Site Scripting Vulnerabilities
Exploit Title: Multiple Stored XSS Vulnerabilities in Wiki Web Help. Date: 23/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://wikiwebhelp.org Software Link: http://sourceforge.net/projects/wwh/files/wwh-0.3.9.7z/download Version: 0.3.9 Gr33Tz: @aviadgolan , @benhayak,...
CVE-2011-5110
Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to 1 authorslist.php, 2 blogslist.php, 3 categorylist.php, 4 commentslist.php, 5 policylist.php, 6 ratelist.php, 7...
CVE-2012-2582
Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or...
CVE-2012-2582
Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or...
CVE-2012-2582
Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or...
CVE-2012-2582
CVE-2012-2582 details multiple XSS vulnerabilities in OTRS/OTRS ITSM. A remote attacker can inject arbitrary script via an email body using (1) CSS in STYLE attributes or (2) UTF-7 in an HTTP-EQUIV=CONTENT-TYPE META element. Affected: OTRS/OTRS ITSM releases where 2.4.x < 2.4.13, 3.0.x < 3....
CVE-2012-2582
Removed by vendor...
CVE-2010-3497
Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that...
CVE-2010-3499
F-Secure Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too la...
CVE-2010-3498
AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to...
CVE-2010-3496
McAfee VirusScan Enterprise 8.5i and 8.7i does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection...
Code injection
Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that...
Code injection
F-Secure Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too la...
Remote code execution
McAfee VirusScan Enterprise 8.5i and 8.7i does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection...
Remote code execution
AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to...
CVE-2010-3498
AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to...
CVE-2010-3496
Affected software: McAfee VirusScan Enterprise 8.5i and 8.7i. Vulnerability cause: improper interaction with the processing of hcp:// URLs by the Microsoft Help and Support Center, per CVE-2010-3496. Impact: remote attackers could execute arbitrary code via malware that is detected by the product...
CVE-2010-3497
CVE-2010-3497 relates to Symantec Norton AntiVirus 2011, where the Norton Antivirus Protocol Handler (HCP) fails to properly interact with hcp:// URLs processed by Microsoft Help and Support Center, enabling remote code execution via a malware payload that is detected too late to prevent executio...