Help Center Live module.php file Parameter Local File Inclusion

The remote host is running Help Center Live, a help desk tool written in PHP. The remote version of Help Center Live fails to sanitize input to the 'file' parameter of the 'module.php' script before using it in a PHP includeonce function. Regardless of PHP's 'registerglobals' setting, an...

CVE-2005-3639

PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability...

CVE-2005-3639

PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability...

CVE-2005-3639

Summary: CVE-2005-3639 is a local/file inclusion vulnerability in the Help Center Live product, affecting the osTicket module prior to version 2.0.3. The issue arises from insufficient sanitization of the file parameter (path traversal risk) in the module.php flow, allowing remote attackers to re...

CVE-2005-3554

Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables...

[SA17580] Help Center Live "file" Local File Inclusion Vulnerability

TITLE: Help Center Live "file" Local File Inclusion Vulnerability SECUNIA ADVISORY ID: SA17580 VERIFY ADVISORY: http://secunia.com/advisories/17580/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Help Center Live 2.x...

CVE-2005-3554: Improper Control of Generation of Code

Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables...

CVE-2005-3639: Undefined Security Weakness

PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability...

Help Center Live 1.01.22.0 - module.php Local File Inclusion

Help Center Live 1.01.22.0 - module.php Local File Inclusion source: https://www.securityfocus.com/bid/15404/info Help Center Live is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

Horde < 2.2.7 Help Subsystem XSS Vulnerability - Active Check

Horde is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ScanMail file check

This script attempts to read sensitive files used by Trend ScanMail, an anti-virus protection program for Domino formerly Lotus Notes. SPDX-FileCopyrightText: 2004 by DokFLeed Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Service Detection with 'HELP' Request

This plugin performs service detection. SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New detection methods / pattern / code since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Unchecked Buffer in Windows Help(Q323255)

An unchecked buffer in Windows help could allow an attacker to could gain control over user's system. Maximum Severity Rating: Critical Recommendation: Customers should install the patch immediately. Affected Software: Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows...

chmlib Microsoft HTML Help IITS files parsing library buffer overflow

Multiple buffer overflow in dufferent parsing...

DEBIAN-CVE-2005-2930

Stack-based buffer overflow in the chmfindinPMGL function in chmlib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318...

[Recommended]to uncover the virus-the mystery of DLL remote inject technical explanation-vulnerability warning-the black bar safety net

DLL remote injection technology is currently the Win32 virus is a widely used technology. Using this technique the virus body is usually located in a DLL, At system startup, an EXE program will the DLL be loaded to some system processes 如 Explorer.exe in the run. As a result, the ordinary Process...

To uncover the virus-the mystery of DLL remote inject technical explanation-vulnerability warning-the black bar safety net

DLL remote injection technology is currently the Win32 virus is a widely used technology. Using this technique the virus body is usually located in a DLL, At system startup, an EXE program will the DLL be loaded to some system processes 如 Explorer.exe in the run. As a result, the ordinary Process...

CVE-2005-3024

Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 announcement parameter to announcement.php, the 2 threadforumid or 3 criteria parameters to thread.php, 4 userid parameter to user.php, the 5...

CVE-2005-3022

Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 announcement parameter to announcement.php, 2 userid parameter to user.php, 3 calendar parameter to admincalendar.php, 4 cronid parameter to cronlog.php, 5...

CVE-2005-3024

Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 announcement parameter to announcement.php, the 2 threadforumid or 3 criteria parameters to thread.php, 4 userid parameter to user.php, the 5...