CVE-2010-1652

The CVE-2010-1652 issue affects Help Center Live (HCL) in the HelpCenter module for versions 2.0.6 and 2.1.7. It is a directory traversal (local file inclusion) vulnerability exploited via a dot-dot sequence in the file parameter to module.php, allowing remote attackers to read arbitrary files an...

Help Center Live 2.0.6 Local File Inclusion

Exploit Title: Help Center Live 2.0.6module=helpcenter&file= Local File Inclusion Date: 27-4-2010 Author: 41.w4r10r Software Link : Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : inurl:"module=helpcenter" Code :...

CLScript.com Classifieds Software - SQL Injection

Exploit Title: CLScript.com Classifieds Software SQL Injection Vunerability Date: 27-4-2010 Author: 41.w4r10r Vendor Link : http://www.clscript.com/ Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : intext:"Powered by CLscript.com" Code :...

CVE-2010-1492

CVE-2010-1492 affects Elastix 1.6.0. A directory traversal flaw in help/frameRight.php (id_nodo parameter) lets remote attackers read arbitrary files using ..; no exploit details provided in the connected docs. CVSSv2 base score 5.0 (Medium). Remediation details are not specified in the supplied ...

Microsoft VBS code execution

If F1 is pressed in dialog window, help file controlled by attacker...

Design/Logic Flaw

Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...

CVE-2010-0863

Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...

Design/Logic Flaw

Unspecified vulnerability in the Retail - Oracle Retail Markdown Optimization component in Oracle Industry Product Suite 13.1 allows remote attackers to affect integrity via unknown vectors related to Online Help...

Design/Logic Flaw

Unspecified vulnerability in the Retail - Oracle Retail Place In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...

CVE-2010-0862

Unspecified vulnerability in the Retail - Oracle Retail Markdown Optimization component in Oracle Industry Product Suite 13.1 allows remote attackers to affect integrity via unknown vectors related to Online Help...

CVE-2010-0864

Unspecified vulnerability in the Retail - Oracle Retail Place In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...

CVE-2010-0864

Technical details for CVE-2010-0864 are not publicly available in the provided documents. No explicit affected product/version, root cause, vector, or fix is given here. Monitor for updates from official advisories or vendor notices.

CVE-2010-0862

The CVE-2010-0862 entry concerns Oracle Industry Product Suite 13.1, specifically the Retail - Oracle Retail Markdown Optimization component. It describes an unspecified vulnerability that could allow remote attackers to affect integrity via unknown vectors related to Online Help. The threat cont...

CVE-2010-0863

CVE-2010-0863 concerns an unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component of Oracle Industry Product Suite 12.2. The available documents identify the affected product/component and indicate the issue could affect integrity via unknown vectors related to Online Hel...

CVE-2010-0862

Unspecified vulnerability in the Retail - Oracle Retail Markdown Optimization component in Oracle Industry Product Suite 13.1 allows remote attackers to affect integrity via unknown vectors related to Online Help...

CVE-2010-0863

Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...

MS10-022: Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (981169)

The installed version of the VBScript Scripting Engine allows an attacker to specify a Help file location when displaying a dialog box on a web page. If a user can be tricked into pressing the F1 key while such a dialog box is being displayed, an attacker can leverage this to cause the Windows He...

Nine days of self-help built Station system Xday-vulnerability warning-the black bar safety net

Keywords: inurl:/regTemletSel. asp? step=2 Or E-Commerce self-help built Station-your ideal assistant Use method: 1 registered 2 web site management---resource management---upload hackqing. asp;qing.jpg 3get a webshell Special case: 1. the forced name change 2. the iis parsing vulnerability is...

Remote Help HTTP server format string vulnerability

No description provided...

Remote Help Default Credentials

It was possible to log in to the Remote Help server on the remote host using a default set of credentials. An attacker could exploit this flaw in order to gain complete control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...