CVE-2006-6160

SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6158

Multiple cross-site scripting XSS vulnerabilities in a PMOS Help Desk 2.4, formerly b InverseFlow Help Desk 2.31 and also sold as c Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the 1 id or email parameter to ticketview.php, or 2 the email parameter to...

CVE-2006-6160

The CVE-2006-6160 entry applies to Doug Luxem Liberum Help Desk, version 0.97.3 and earlier, where a SQL injection flaw exists in details.asp that allows remote attackers to execute arbitrary SQL commands through the id parameter. The vulnerability is verified by public records (NVD) and related ...

CVE-2006-6158

CVE-2006-6158 affects PMOS Help Desk 2.4 (aka InverseFlow Help Desk 2.31, sold as Ace Helpdesk 2.31). The vulnerability is multiple cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via: (1) the id or email parameter to ticketview.php, or (2) the email...

CVE-2006-6161

The CVE-2006-6161 entry affects Doug Luxem’s Liberum Help Desk, specifically versions 0.97.3 and earlier. It describes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) uid parameters to (a) inout/status.asp, (b) inout/upda...

ihd231-xss.txt

XSS in scriptat support InverseFlow Help Desk v2.31 :::::::::::::::::::::::::::::::::::::::::::::::::::::: Discovered : SwEET-DeViL & viP HaCkEr & HaCkEr sUn Name scriptat: InverseFlow Help Desk v2.31 tame : AL-garnei K-S-A :::::::::::::::::::::::::::::::::::::::::::::::::::::: 1 in ticketview.ph...

Liberum Help Desk <= 0.97.3 (details.asp) SQL Injection Vulnerability

No description provided by source. Title : Liberum Help Desk = 0.97.3 details.asp Remote SQL Injection Vulnerability Author : ajann Contact : : Dork : "Liberum Help Desk, Copyright C 2001 Doug Luxem. Please view the license http://target/path//details.asp?id=SQL Example:...

Liberum Help Desk <= 0.97.3 (details.asp) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Liberum Help Desk All Password Changed to "kro" """"""""""""""""""""" ajann,Turkey ... Im not Hacker! 0day.today 2017-12-31...

Liberum Help Desk 0.97.3 - SQL Injection

Title : Liberum Help Desk All Password Changed to "kro" """"""""""""""""""""" ajann,Turkey ... Im not Hacker! milw0rm.com 2006-11-25...

Liberum Help Desk 0.97.3 - SQL Injection

Liberum Help Desk 0.97.3 - SQL Injection Title : Liberum Help Desk All Password Changed to "kro" """"""""""""""""""""" ajann,Turkey ... Im not Hacker! milw0rm.com 2006-11-25...

XSS in scriptat support InverseFlow Help Desk v2.31

XSS in scriptat support InverseFlow Help Desk v2.31 :::::::::::::::::::::::::::::::::::::::::::::::::::::: Discovered : SwEET-DeViL & viP HaCkEr & HaCkEr sUn Name scriptat: InverseFlow Help Desk v2.31 tame : AL-garnei K-S-A :::::::::::::::::::::::::::::::::::::::::::::::::::::: 1 in ticketview.ph...

PMOS Help Desk 2.3 - ticketview.php Multiple Cross-Site Scripting Vulnerabilities

PMOS Help Desk 2.3 - ticketview.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21250/info InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code execute in th...

PMOS Help Desk 2.3 - ticket.php?email Cross-Site Scripting

PMOS Help Desk 2.3 - ticket.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21250/info InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

PMOS Help Desk 2.3 - 'ticketview.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21250/info InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may he...

PMOS Help Desk 2.3 - 'ticket.php?email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21250/info InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may he...

Crafty Syntax Live Help 2.9.9 - Multiple Remote File Inclusions

Crafty Syntax Live Help 2.9.9 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/20711/info Crafty Syntax Live Help is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...

Crafty Syntax Live Help 2.9.9 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/20711/info Crafty Syntax Live Help is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system...

DEBIAN-CVE-2006-5295

Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service scanning service crash via a crafted Compressed HTML Help CHM file that causes ClamAV to "read an invalid memory location."...

CVE-2006-5295

Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service scanning service crash via a crafted Compressed HTML Help CHM file that causes ClamAV to "read an invalid memory location."...

Debian DSA-1034-1 : horde2 - several vulnerabilities

Several remote vulnerabilities have been discovered in the Horde web application framework, which may lead to the execution of arbitrary web script code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1260 Null characters in the URL parameter bypas...