CVE-2025-52564

Chamilo is a learning management system. Prior to version 1.11.30, the open parameter of help.php fails to properly sanitize user input. This allows an attacker to inject arbitrary HTML, such as underlined text, via a crafted URL. This issue has been patched in version 1.11.30...

CVE-2025-52564: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Chamilo is a learning management system. Prior to version 1.11.30, the open parameter of help.php fails to properly sanitize user input. This allows an attacker to inject arbitrary HTML, such as underlined text, via a crafted URL. This issue has been patched in version 1.11.30...

EUVD-2008-6171

Malware in sbrugna...

CVE-2006-4938

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message...

PT-2021-3950

Name of the Vulnerable Software and Affected Versions CTparental versions prior to 4.45.07 Description The issue is related to a code execution vulnerability in the CTparental admin panel. Specifically, the file "bl categories help.php" is vulnerable to directory traversal, allowing an attacker t...

PT-2021-4030

Name of the Vulnerable Software and Affected Versions CTparental versions prior to 4.45.03 Description The issue is related to cross-site scripting XSS in the CTparental admin panel. Specifically, in the bl categires help.php file, the categories variable is assigned with the content of the query...

OIC Exponent CMS Input Validation Vulnerability

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. An input validation error vulnerability exists in Exponen...

PT-2020-8056

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the cron/find help.php file. This can potentially lead to security issues due to the lack of proper validation of user input...

CVE-2017-12586

SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. It can be exploited by remote authenticated librarian users...

CVE-2017-12586

SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. It can be exploited by remote authenticated librarian users...

CVE-2017-12586

The CVE-2017-12586 issue affects SLiMS 8 Akasia up to version 8.3.1. Affected component: admin/help.php URL parameter handling, where a directory traversal flaw allows arbitrary file reading. It can be exploited by remote authenticated librarian users. The connected sources confirm the vulnerabil...

PT-2017-12590

Name of the Vulnerable Software and Affected Versions SLiMS versions 8 Akasia through 8.3.1 Description The issue is related to an arbitrary file reading problem due to directory traversal in the url parameter to "admin/help.php". This can be exploited by remote authenticated librarian users...

CVE-2017-12586: Improper Limitation of a Pathname to a Restricted Directory

SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. It can be exploited by remote authenticated librarian users...

PT-2017-9337

Name of the Vulnerable Software and Affected Versions Exponent CMS versions 2.3.9 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the version parameter in the cron/find help.php file. Recommendations For Exponent CMS versions 2.3.9...

caron.yann.free.fr XSS vulnerability

Vulnerable URL: http://caron.yann.free.fr/algoid/help.php?name==referenceEN Details: Description| Value ---|--- Patched:| Yes, at 09.04.2017 Latest check for patch:| 09.04.2017 13:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

ridefox.com XSS vulnerability

Vulnerable URL: http://www.ridefox.com/help.php?m=bike1%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E=bchelp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

WordPress Tidio Gallery Plugin <= 1.1 - Cross Site Scripting (XSS)

This vulnerability is in the php code /tidio-gallery/popup-insert-help.php. Solution Update the plugin...

Mallbuilder help.php 文件 type 参数SQL注入漏洞

0x01漏洞简介 Mallbuilder文件help.php对type参数过滤不严，导致出现SQL注入漏洞。 0x02漏洞详情 首先来看看全局文件 function magic if!getmagicquotesgpc&&isset$POST foreach$POST as $key=$v if!isarray$v $POST$key=addslashes$v; else foreach$v as $skey=$sv if!isarray$sv $POST$key$skey=addslashes$sv; else if$sssv foreach$sv as $sskey=$ssv...

clickoff.goodbyegraffiti.com XSS vulnerability

Vulnerable URL: http://clickoff.goodbyegraffiti.com/help/help.php?pagetitle=...

ZZ FlashChat <= 3.1 - (help.php) Local File Inclusion Vulnerability

No description provided by source. Title : ZZ:FlashChat Local File Inclusion Vulnerability Source : http://download.zehnet.de/index.php Author : d3hydr8 Homepage : http://www.darkc0de.com Vuln: : /chat/admin/inc/help.php?file=LFI milw0rm.com 2007-10-19...