CVE-2010-1264: Undefined Security Weakness

Unspecified vulnerability in Microsoft Windows SharePoint Services 3.0 SP1 and SP2 allows remote attackers to cause a denial of service hang via crafted requests to the Help page that cause repeated restarts of the application pool, aka "Sharepoint Help Page Denial of Service Vulnerability."...

PTC Site's Remote Command Execution / Cross Site Scripting

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ @Title: PTC Site's RCE/XSS Vulnerability @Vendor: http://www.ptcsites4sale.info & and etc...:D @Author: CrazyMember @Mail: [email protected] @SPC Thanks: XroGuE 4 r3p0r7 :P @Dork:"intext:Warning: passthru" "inurl:view=help"...

[SECURITY] Fedora 12 Update: kdeaccessibility-4.4.3-1.fc12.1

Included with this package are: kmag: a screen magnifier kmousetool: a program for people whom it hurts to click the mouse kmouth: program that allows people who have lost their voice ktts: text to speech support...

Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002

The remote host is missing Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002. One or more of the following components are affected: Apache ATS BIND CFNetwork CoreGraphics Cscope CUPS Disk Images enscript Flash Player plug-in Help Viewer iChat International Components for Unicode IPSec...

Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003

The remote host is missing Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003. One or more of the following components are affected: AFP Server Apache AppKit Apple Pixlet Video ATS CFNetwork CoreFoundation CoreGraphics CoreTypes CUPS Flash Player Plug-in Help Viewer iCal International...

Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003

The remote host is missing Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002

The remote host is missing Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2010-1652

Directory traversal vulnerability in the HelpCenter module in Help Center Live HCL 2.0.6 and 2.1.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the file parameter to module.php. NOTE: some of these details are obtained from third...

CVE-2010-1660

The CVE-2010-1660 issue affects CLScript Classifieds Script, specifically the help-details.php component, where the hpId parameter is vulnerable to SQL injection. This allows remote attackers to inject arbitrary SQL commands due to improper input handling, enabling possible data exposure or modif...

CVE-2010-1652

Directory traversal vulnerability in the HelpCenter module in Help Center Live HCL 2.0.6 and 2.1.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the file parameter to module.php. NOTE: some of these details are obtained from third...

CVE-2010-1652

The CVE-2010-1652 issue affects Help Center Live (HCL) in the HelpCenter module for versions 2.0.6 and 2.1.7. It is a directory traversal (local file inclusion) vulnerability exploited via a dot-dot sequence in the file parameter to module.php, allowing remote attackers to read arbitrary files an...

CVE-2010-1660: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitrary SQL commands via the hpId parameter...

CVE-2010-1652: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the HelpCenter module in Help Center Live HCL 2.0.6 and 2.1.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the file parameter to module.php. NOTE: some of these details are obtained from third...

Help Center Live 2.0.6 Local File Inclusion

Exploit Title: Help Center Live 2.0.6module=helpcenter&file= Local File Inclusion Date: 27-4-2010 Author: 41.w4r10r Software Link : Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : inurl:"module=helpcenter" Code :...

CLScript.com Classifieds Software - SQL Injection

Exploit Title: CLScript.com Classifieds Software SQL Injection Vunerability Date: 27-4-2010 Author: 41.w4r10r Vendor Link : http://www.clscript.com/ Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : intext:"Powered by CLscript.com" Code :...

CVE-2010-1492

CVE-2010-1492 affects Elastix 1.6.0. A directory traversal flaw in help/frameRight.php (id_nodo parameter) lets remote attackers read arbitrary files using ..; no exploit details provided in the connected docs. CVSSv2 base score 5.0 (Medium). Remediation details are not specified in the supplied ...

CVE-2010-1492: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote attackers to read arbitrary files via a .. dot dot in the idnodo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Microsoft VBS code execution

If F1 is pressed in dialog window, help file controlled by attacker...

Design/Logic Flaw

Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...

CVE-2010-0863

Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...