CVE-2008-6057

The vulnerability CVE-2008-6057 affects Doug Luxem Liberum Help Desk 0.97.3, where the database file db/helpdesk2000.mdb is stored under the web root with insufficient access control. This allows remote attackers to obtain passwords via a direct request. The NVD entry lists a base score of 5.0 (M...

CVE-2008-6057

Doug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request...

CVE-2009-0303

Cross-site scripting XSS vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa...

Cross site scripting

Cross-site scripting XSS vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa...

CVE-2009-0303

CVE-2009-0303 describes a Cross-site scripting (XSS) vulnerability in the Web Help Desk product prior to version 9.1.18. The vulnerability allows remote attackers to inject arbitrary web script or HTML via vectors related to encoded JavaScript and Helpdesk.woa. The available connected sources con...

CVE-2009-0303

Cross-site scripting XSS vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa...

Microsoft HTML Help Workshop buffer overflow vulnerability

The host is running Microsoft HTML Help Workshop which is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbmshtmlhelpwsbofvuln.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft HTML Help Workshop buffer overflow vulnerability Authors: Nikita MR Copyright: Copyright c 2009...

Microsoft HTML Help Workshop buffer overflow vulnerability

Microsoft HTML Help Workshop is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Buffer overflow

Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564...

CVE-2009-0133

Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564...

CVE-2009-0133

CVE-2009-0133 describes a stack buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier triggered by a crafted .hhp project file with a long Index file field, enabling context-dependent attackers to execute arbitrary code. Connected data confirms related public disclosures and exploitati...

CVE-2009-0133

Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564...

TSC2 Help Desk ActiveX buffer overflow

CTab ActiveX buffer overflow...

Secunia Research: TSC2 Help Desk CTab ActiveX Control Buffer Overflow

====================================================================== Secunia Research 07/01/2009 - TSC2 Help Desk CTab ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

SizerOne ActiveX Control AddTab Method Remote Buffer Overflow

The SizerOne ActiveX control is installed on the remote system. It is included with ComponentOne Studio Enterprise as well as other applications such as TSC2 Help Desk and SAP GUI. The installed version of the control is affected by a heap-based buffer overflow vulnerability that can be triggered...

多个供应商SizerOne ActiveX控件'AddTab'方法缓冲区溢出漏洞

BUGTRAQ ID: 33148 CNCAN ID：CNCAN-2009010809 ComponentOne SizerOne是一款集成了四个控件的组件工具，包括了两个调整分割控件用来控制所有的调整分割任务，一个个Tabbling控件用来快速创建类似记事本和OutLook风格的Tab，一个字符分割控件自动处理分割和剪切字符的工作。 ComponentOne SizerOne包含的控件对'AddTab'方法处理存在问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 -TAB...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

CVE-2008-5710

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

Liberum Help Desk 0.97.3 SQL Injection

Liberum Help Desk SQL/DD Multiple Remote Vulnerabilities author : Cold z3ro, www.hackteach.org Dork : "Liberum Help Desk, Copyright C 2001 Doug Luxem" ============== SQL Injection http://www.site.com/path/forgotpass.asp In uid insert SQL command's = SCMD == ' or '1=1 SCMD == ' or 'update tblusers...

Liberum Help Desk 0.97.3 - SQL Injection File Disclosure

Liberum Help Desk 0.97.3 - SQL Injection File Disclosure Liberum Help Desk SQL/DD Multiple Remote Vulnerabilities author : Cold z3ro, www.hackteach.org Dork : "Liberum Help Desk, Copyright C 2001 Doug Luxem" ============== SQL Injection http://www.site.com/path/forgotpass.asp In uid insert SQL...