CVE-2008-0848

Cross-site scripting XSS vulnerability in lostsheep.php in Crafty Syntax Live Help CSLH before 2.14.16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the versions claimed by the original researcher are probably incorrect...

CVE-2008-0848

Crafty Syntax Live Help (CSLH) is affected by CVE-2008-0848 due to an XSS vulnerability in lostsheep.php present in versions before 2.14.16. The entry states remote attackers can inject arbitrary script or HTML via unspecified vectors. The notes mention possible inaccuracies in the researcher’s v...

Crafty Syntax Xss Vulnerability

Crafty Syntax Live Help is an open source help desk system built mainly for small-mid sized companies. The software includes an xss vulnerability on lostsheep.php module. Versions effected: 2.4.13 - 2.4.14 -- Ozgur Ozdemircili CCNA, HIPAA, OPSEC, Open Source Security Systems...

PHP Live! 3.2.2 - 'questid' SQL Injection (1)

!Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your website. !SQL Injection! Code:...

A-Blog 2.0 - Cross-Site Scripting SQL Injection

A-Blog 2.0 - Cross-Site Scripting SQL Injection !/usr/bin/perl A-Blog V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...

[waraxe-2008-SA#063] - Information Leakage in Kayako SupportSuite 3.11.01

waraxe-2008-SA063 - Information Leakage in Kayako SupportSuite 3.11.01 =============================================================================== Author: Janek Vind "waraxe" Date: 21. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-63.html Target software description...

FaScript FaName v1 (page.php) Remote SQL Injection Vulnerability

No description provided by source. FaScript FaName v1 Remote Sql Injection BY IRCRASH AUTHOR&nbs...

Sql injection

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter...

CVE-2007-6550

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter...

CVE-2007-6550

PMOS Help Desk 2.4 and earlier is affected by CVE-2007-6550. form.php redirects without exiting, enabling remote attackers to perform eval injection and execute arbitrary PHP code via the options array parameter. Affected component: PMOS Help Desk’s PHP form handling. Root cause: missing exit aft...

PMOS Help Desk form.php脚本代码注入漏洞

BUGTRAQ ID: 27032 PMOS Help Desk之前名为InverseFlow Help Desk，是一款开源的帮助台系统。 PMOS Help Desk的form.php脚本没有限制对登录用户的访问，没有跟随重新定向的HTTP客户端可以利用这个漏洞绕过限制执行任意PHP代码。 h2desk PMOS Help Desk = 2.4 厂商补丁： h2desk ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.h2desk.com/pmos/ ?php /...

pmos-exec.txt

?php / ------------------------------------------------------ PMOS Help Desk = 2.4 Remote Command Execution Exploit ------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.h2desk.com/pmos dork.....: "Powered by PMOS Help Desk" ...

CVE-2007-6550

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter...

PMOS Help Desk form.php Arbitrary Code Execution

The remote host is running PMOS Help Desk, an open source help desk application written in PHP. The version of PMOS Help Desk installed on the remote host contains a design flaw that can be leveraged by a remote attacker to bypass authentication and make changes to the application's form template...

PMOS Help Desk <= 2.4 Remote Command Execution Exploit

No description provided by source. ?php / ------------------------------------------------------ PMOS Help Desk = 2.4 Remote Command Execution Exploit ------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.h2desk.com/pmos...

PMOS Help Desk 2.4 - Remote Command Execution

?php / ------------------------------------------------------ PMOS Help Desk = 2.4 Remote Command Execution Exploit ------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.h2desk.com/pmos dork.....: "Powered by PMOS Help Desk" ...

PMOS Help Desk 2.4 - Remote Command Execution

PMOS Help Desk 2.4 - Remote Command Execution ?php / ------------------------------------------------------ PMOS Help Desk = 2.4 Remote Command Execution Exploit ------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

PMOS Help Desk <= 2.4 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ====================================================== PMOS Help Desk = 2.4 Remote Command Execution Exploit ====================================================== ?php / ------------------------------------------------------ PMOS Help Des...

CVE-2007-6477

Cross-site scripting XSS vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (3)

No description provided by source. / \ Windows HTML Help Workshop Index File Stack Overflow Exploit / by Darkeagle \ / http://eagle.blacksecurity.org \ / MS coders codes so secure code. Keep coding : \ / Original Advisory: http://eagle.blacksecurity.org/stuff/unl0ck/adv/55k700206.txt \ /...