Help Center Live 2.1.2 - 'module.php' Directory Traversal

source: https://www.securityfocus.com/bid/19256/info Help Center Live is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve arbitrary files from the vulnerable system in the context of the affected...

Cisco VPN client for Windows privilege escalation

Privilege escalation with help subsystem...

Microsoft Internet Explorer vulnerable to heap overflow via the HTML Help Control "Image" property

Overview The HTML Help ActiveX control contains a heap overflow vulnerability. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description ActiveXActiveX is a technology that allows programmers to create reusable software components that can be...

CVE-2006-3357

Heap-based buffer overflow in HTML Help ActiveX control hhctrl.ocx in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values,...

CVE-2006-3357

Heap-based buffer overflow in HTML Help ActiveX control hhctrl.ocx in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values,...

CVE-2006-3357

CVE-2006-3357 describes a heap overflow in the HTML Help ActiveX control (hhctrl.ocx) used by Internet Explorer 6. The vulnerability occurs when repeatedly setting the Image property of Internet.HHCtrl.1, which can lead to remote code execution or an application crash. Public advisories attribute...

FreeBSD : horde -- various problems in dereferrer (e94cb43d-0c4a-11db-9016-0050bf27ba24)

Horde 3.1.2 release announcement : Security Fixes : - Closed XSS problems in dereferrer IE only, help viewer and problem reporting screen. - Removed unused image proxy code from dereferrer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

[Full-disclosure] Public Advisory: Horde 3.1.1, 3.0.10 Multiple Security Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SA0011 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++ Horde 3.1.1, 3.0.10 Multiple Security Issues +++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PUBLISHED ON July 05, 2006 PUBLISHED AT...

Horde < 3.0.11 / 3.1.2 Multiple Script XSS

The version of Horde installed on the remote host fails to validate input to the 'url' parameter of the 'services/go.php' script before using it in dynamically-generated content. An unauthenticated attacker may be able to leverage this issue to inject arbitrary HTML and script code into a user's...

WinRAR 3.60 Beta 6 - SFX Path Stack Overflow

""" WinRAR - Stack Overflows in SelF - eXtracting Archives ====================================================== Tested Versions..: WinRAR 3.60 beta 4 Author.............: posidron An SFX SelF-eXtracting archive is an archive, merged with an executable module, which is used to extract files from...

MoBB #2: Internet.HHCtrl Image Property

The following bug was tested on the latest version of Internet Explorer 6 on a fully-patched Windows XP SP2 system. This bug is interesting because a small heap overflow occurs each time this property is set. The bug is difficult to detect unless heap verification has been enabled in the global...

horde -- various problems in dereferrer

Horde 3.1.2 release announcement: Security Fixes: Closed XSS problems in dereferrer IE only, help viewer and problem reporting screen. Removed unused image proxy code from dereferrer...

Cross site scripting

Cross-site scripting XSS vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter...

CVE-2006-2850

Cross-site scripting XSS vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter...

Directory traversal

Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitrary files via .. dot dot sequences in the helpfile parameter...

Help Center Live osTicket Module Multiple Unspecified SQL Injections

The remote host is running Help Center Live, an open source, web-based help desk application written in PHP. The version of Help Center Live installed on the remote host contains a version of osTicket that is affected by multiple SQL injection issues. An unauthenticated attacker may be able to...

Sql injection

Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2006-2039

Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2006-2039

Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2006-2039

CVE-2006-2039 : The osTicket component of Help Center Live prior to 2.1.0 contains multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via unknown vectors. Affected software: Help Center Live with embedded osTicket prior to 2.1.0. Impact described in connect...