CVE-2011-0785

Unspecified vulnerability in the Oracle Help component in Oracle Database Server 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, and 10.1.0.5; and Oracle Fusion Middleware 11.1.1.2.0, 11.1.1.3.0, and 11.1.1.4.0 allows remote attackers to affect integrity via unknown vectors...

EC Software Help Manual 5.5.1 Build 1296 - ijl15.dll DLL Loading Arbitrary Code Execution

EC Software Help Manual 5.5.1 Build 1296 - ijl15.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/47349/info EC Software Help & Manual is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to us...

Help & Manual Professional Edition 5.5.1 (ijl15.dll) DLL Hijacking Exploit

Summary Help & Manual 5 is a single-source help authoring and content management system for both single and multi-author editing. Description Help & Manual suffers from a DLL hijacking vulnerability that enables the attacker to execute arbitrary code on the affected machine. The vulnerable...

EC Software Help & Manual 5.5.1 Build 1296 - 'ijl15.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/47349/info EC Software Help & Manual is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

Help And Manual Professional Edition 5.5.1 DLL Hijack

/ Help & Manual Professional Edition 5.5.1 ijl15.dll DLL Hijacking Exploit Vendor: EC Software GmbH Product web page: http://www.helpandmanual.com Affected version: 5.5.1 Build 1296 Summary: Help & Manual 5 is a single-source help authoring and content management system for both single and...

Stack overflow in Microsoft HTML Help 6.1 (CHM files)

Luigi Auriemma Application: Microsoft HTML Help http://www.microsoft.com Versions: = 6.1 Platforms: Windows any version included the latest Windows 7 Bug: stack overflow Date: 12 Apr 2011 found 20 Feb 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3...

Microsoft HTML Help <= 6.1 Stack Overflow

No description provided by source. Source: http://aluigi.org/adv/chm1-adv.txt Luigi Auriemma Application: Microsoft HTML Help http://www.microsoft.com Versions: = 6.1 Platforms: Windows any version included the latest Windows 7 Bug: stack overflow Date: 12 Apr 2011 found 20 Feb 2011 Author: Luigi...

Windows help system buffer overflow

Buffer overflow on CHM files parsing...

Microsoft HTML Help 6.1 - Local Stack Overflow

Microsoft HTML Help 6.1 - Local Stack Overflow Source: http://aluigi.org/adv/chm1-adv.txt Luigi Auriemma Application: Microsoft HTML Help http://www.microsoft.com Versions: = 6.1 Platforms: Windows any version included the latest Windows 7 Bug: stack overflow Date: 12 Apr 2011 found 20 Feb 2011...

Microsoft HTML Help 6.1 - Local Stack Overflow

Source: http://aluigi.org/adv/chm1-adv.txt Luigi Auriemma Application: Microsoft HTML Help http://www.microsoft.com Versions: = 6.1 Platforms: Windows any version included the latest Windows 7 Bug: stack overflow Date: 12 Apr 2011 found 20 Feb 2011 Author: Luigi Auriemma e-mail:...

Majordomo2 directory traversal

Directory traversal on help command processing via e-mail or Web...

Mandriva Update for eclipse MDVSA-2011:032 (eclipse)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : eclipse (MDVSA-2011:032)

A vulnerability has been found and corrected in eclipse : Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 help/index.jsp o...

VMSA-2009-0017 : VMware vCenter, ESX patch and vCenter Lab Manager releases address XSS issues

a. WebWorks Help - Cross-site scripting vulnerability WebWorks Help is an output format that allows online Help to be delivered on multiple platforms and browsers, which makes it easy to publish information on the Web or on an enterprise intranet. WebWorks Help is used for creating the online hel...

PT-2011-2045 · Great Circle Associates · Majordomo

Name of the Vulnerable Software and Affected Versions: Majordomo versions prior to 20110131 Description: The issue allows remote attackers to read arbitrary files via .. dot dot sequences in the help command. This can be achieved by sending a crafted email or by exploiting the web interface,...

CVE-2010-4647

Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 help/index.jsp or 2 help/advanced/content.jsp...

CVE-2008-7271

Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via 1 the searchWord parameter to help/advanced/searchView.jsp or 2 the workingSet parameter in ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via 1 the searchWord parameter to help/advanced/searchView.jsp or 2 the workingSet parameter in ...

CVE-2010-4647

Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 help/index.jsp or 2 help/advanced/content.jsp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 help/index.jsp or 2 help/advanced/content.jsp...