CVE-2005-3639

PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability...

CVE-2005-3639

PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability...

CVE-2005-3639

Summary: CVE-2005-3639 is a local/file inclusion vulnerability in the Help Center Live product, affecting the osTicket module prior to version 2.0.3. The issue arises from insufficient sanitization of the file parameter (path traversal risk) in the module.php flow, allowing remote attackers to re...

CVE-2005-3554

Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables...

[SA17580] Help Center Live "file" Local File Inclusion Vulnerability

TITLE: Help Center Live "file" Local File Inclusion Vulnerability SECUNIA ADVISORY ID: SA17580 VERIFY ADVISORY: http://secunia.com/advisories/17580/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Help Center Live 2.x...

Help Center Live 1.01.22.0 - module.php Local File Inclusion

Help Center Live 1.01.22.0 - module.php Local File Inclusion source: https://www.securityfocus.com/bid/15404/info Help Center Live is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

Horde < 2.2.7 Help Subsystem XSS Vulnerability - Active Check

Horde is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Service Detection with 'HELP' Request

This plugin performs service detection. SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New detection methods / pattern / code since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ScanMail file check

This script attempts to read sensitive files used by Trend ScanMail, an anti-virus protection program for Domino formerly Lotus Notes. SPDX-FileCopyrightText: 2004 by DokFLeed Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Unchecked Buffer in Windows Help(Q323255)

An unchecked buffer in Windows help could allow an attacker to could gain control over user's system. Maximum Severity Rating: Critical Recommendation: Customers should install the patch immediately. Affected Software: Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows...

chmlib Microsoft HTML Help IITS files parsing library buffer overflow

Multiple buffer overflow in dufferent parsing...

DEBIAN-CVE-2005-2930

Stack-based buffer overflow in the chmfindinPMGL function in chmlib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318...

[Recommended]to uncover the virus-the mystery of DLL remote inject technical explanation-vulnerability warning-the black bar safety net

DLL remote injection technology is currently the Win32 virus is a widely used technology. Using this technique the virus body is usually located in a DLL, At system startup, an EXE program will the DLL be loaded to some system processes 如 Explorer.exe in the run. As a result, the ordinary Process...

To uncover the virus-the mystery of DLL remote inject technical explanation-vulnerability warning-the black bar safety net

DLL remote injection technology is currently the Win32 virus is a widely used technology. Using this technique the virus body is usually located in a DLL, At system startup, an EXE program will the DLL be loaded to some system processes 如 Explorer.exe in the run. As a result, the ordinary Process...

CVE-2005-3024

Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 announcement parameter to announcement.php, the 2 threadforumid or 3 criteria parameters to thread.php, 4 userid parameter to user.php, the 5...

CVE-2005-3022

Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 announcement parameter to announcement.php, 2 userid parameter to user.php, 3 calendar parameter to admincalendar.php, 4 cronid parameter to cronlog.php, 5...

CVE-2005-3024

Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 announcement parameter to announcement.php, the 2 threadforumid or 3 criteria parameters to thread.php, 4 userid parameter to user.php, the 5...

Hesk Session ID Validation Vulnerability

OS2A Hesk Session ID Validation Vulnerability OS2A ID: OS2A1003 Status 9/13/2005 Issue Discovered 9/14/2005 Reported to the vendor 9/18/2005 Patch Released 9/20/2005 Advisory Released Class: Authentication Bypass Severity: CRITICAL Overview: Hesk is a PHP based help desk software that runs with a...

PT-2005-3703 · Plain Black · Webgui

Name of the Vulnerable Software and Affected Versions: WebGUI versions prior to 6.7.3 Description: The issue allows remote attackers to execute arbitrary Perl code via multiple eval injection vulnerabilities in the following modules: 1 Help.pm, 2 International.pm, or 3 WebGUI.pm. Recommendations:...

Symantec AntiVirus Corporate Edition 9.0 and Symantec Client Security 2.0 Help File Elevation of Pri

SUMMARY The Symantec AntiVirus Corporate Edition HTML client help function uses HTML help, the Windows help interface, to provide support to the client user. A non-privileged client user can manipulate the help function to access files on the system with local SYSTEM privileges. Risk Impact Mediu...