CVE-2005-1672: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the 1 find parameter to index.php, 2 name or 3 message field of a chat request, or 4 the message body when opening a trouble ticket...

PT-2005-2651 · Help Center Live · Help Center Live

Name of the Vulnerable Software and Affected Versions: Help Center Live affected versions not specified Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This allows remote attackers to perform actions as the administrator via a link or IMG tag to "view.php"...

[SA15401] Help Center Live Multiple Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Help Center Live Multiple Vulnerabilities SECUNIA...

Help Center Live Multiple Vulnerabilities (SQLi, XSS, CSRF)

The remote host is running Help Center Live, a help desk written in PHP that suffers from multiple vulnerabilities: - Multiple SQL Injection Vulnerabilities The application fails in many cases to sanitize user- supplied input before using it in database queries. As long as PHP's 'magicquotesgpc'...

CVE-2005-1337

Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:// URI...

CVE-2005-1337

Technical details for CVE-2005-1337 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-1337: Undefined Security Weakness

Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:// URI...

CVE-2005-1372

nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu...

CVE-2005-1372

nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu...

CVE-2005-1371: Undefined Security Weakness

BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges...

CVE-2005-1372: Undefined Security Weakness

nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu...

BulletProof FTP Server privilege escalation

Privilege escalation with help subsystem...

CVE-2004-1624

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via 1 the help topic interface in CCW32.exe, which launches Notepad, or 2 the help button in the Carbon Copy Scheduler CCSched.exe...

CVE-2004-1624: Undefined Security Weakness

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via 1 the help topic interface in CCW32.exe, which launches Notepad, or 2 the help button in the Carbon Copy Scheduler CCSched.exe...

Microsoft Internet Explorer DHTML Edit and Help ActiveX crossite scripting

DHTML ActiveX and Help allows code injection into context of different server. By combining this vulnerability it's psosible to execute code in local machine zone. This vulnerability can potentially be used for silent spyware/adware installation...

[SA13935] Help Desk Reloaded Unspecified Login Vulnerability

TITLE: Help Desk Reloaded Unspecified Login Vulnerability SECUNIA ADVISORY ID: SA13935 VERIFY ADVISORY: http://secunia.com/advisories/13935/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Help Desk Reloaded 3.x http://secunia.com/product/4545/ DESCRIPTION: A...

Alert: Microsoft Security Bulletin MS05-001 - Vulnerability in HTML Help Could Allow Code Execution (890175)

Microsoft Security Bulletin MS05-001 Vulnerability in HTML Help Could Allow Code Execution 890175 Issued: January 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

Microsoft Windows HTML Help ActiveX control does not adequately validate window source

Overview The Microsoft Windows HTML Help ActiveX control contains a cross-domain vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands or code with the privileges of the user running the control. The HTML Help control can be instantiated by an HTML...

VulnCheck KEV: CVE-2004-1043

Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control hhctrl.ocx to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as...

MS05-001: HTML Help Code Execution (890175)

The remote host contains a version of the HTML Help ActiveX control that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. C Tenable Network Security, Inc. include"compat.inc"; if description...