3453 matches found
CVE-2002-0974
Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses uplddrvinfo.htm...
CVE-2002-0694
The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to...
Help Center Live < 2.1.0 osTicket Multiple SQL Injection
Binary data 3521.prm...
Microsoft HTML Help buffer overflow
Buffer overflow on CHM format parsing...
Microsoft Windows HTML Help component fails to properly validate input data
Overview There is a vulnerability in the HTML Help component of Microsoft Windows that could allow an attacker to execute arbitrary code on an affected system. Description Microsoft HTML Help provides a standard help system for the Windows operating system. There is a vulnerability in the way...
Microsoft Windows Utility Manager Local Privilege Escalation Variant Vulnerability
Description Microsoft Utility Manager is prone to a local privilege escalation vulnerability. It is reported that a local user may influence the Utility Manager into executing an attacker-supplied application with elevated privileges. The cause of this issue is that the Utility Manager will attem...
Moodle Help Script 1.x - Cross-Site Scripting
Moodle Help Script 1.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/10718/info It is reported that Moodle is susceptible to a cross-site scripting vulnerability in the 'help.php' script. This issue is due to a failure of the application to properly sanitize user-supplied input...
Microsoft Windows HTML Help Heap Overflow Vulnerability
Description The Microsoft Windows HTML Help facility is prone to a remotely exploitable heap overflow vulnerability. This vulnerability could be exploited from a malicious Web page or through HTML email to execute arbitrary code with the privileges of the currently logged in user. Technologies...
MS04-023: Vulnerability in HTML Help Could Allow Code Execution (840315)
The remote host is subject to two vulnerabilities in the HTML Help and showHelp modules that could allow an attacker to execute arbitrary code on the remote host. To exploit these flaws, an attacker would need to set up a rogue website containing a malicious showHelp URL, and would need to lure a...
CVE-2004-0474
Help Center HelpCtr.exe may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue...
[Full-Disclosure] ZH2004-13SA (security advisory): Sql Injection in Help Desp Pro 2.0
26/06/2004 ZH2004-10SA security advisory: Sql Injection in Help Desp Pro 2.0 Date of discovery : 1 Giugno 2004 Date of release 26 Giugno 2004 Nome: Help Desk Pro Vulnerable Version: 2.0 non patchato Vulnerability: Sql Injection Autore: D'Amato Luigi from Zone-h Security Labs -...
Cross-site scripting vulnerability in Crafy Syntax Live Help 2.7.3 and below
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The problem: Users are able to insert pieces of html both in their name when they request livehelp and in chat sessions. For example. If I where to input the following javascript inside a ""script"" tag and use it as my name...
Crafty Syntax Live Help 2.7.3 - Multiple HTML Injection Vulnerabilities
Crafty Syntax Live Help 2.7.3 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/10463/info CSLH is prone to multiple HTML injection vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data. The problem presents itself in various...
Crafty Syntax Live Help 2.7.3 - Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/10463/info CSLH is prone to multiple HTML injection vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data. The problem presents itself in various modules of the application and can allow remote attackers to inject HTML...
CVE-2003-0908
The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialo...
CVE-2004-0474
Help Center HelpCtr.exe may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue...
CVE-2004-0474
CVE-2004-0474 affects Help Center (HelpCtr.exe). A remote attacker can supply an http:// or file:// URL as the topic parameter in an hcp:// URL to read or execute arbitrary files. The provided documents do not specify affected versions, exploitation status, or remediation steps.
Safari remote arbitrary code execution
Adv: safari0x04 Release Date: 10/05/04 Affected Products: Safari = 1.2 Fixed in: Not fixed. Impact: Remote code execution. Severity: High. Vendor: Notified 23/02/04 Author: fundisom.com Apple uses a special function to execute scripts and applications from his Help system. Unfortunatly, this Help...
[Full-Disclosure] Vuln. MacOSX/Safari: Remote help-call, execute scripts
I usually complain a lot about the Windows-security settings, and consider NIX systems to be of an entirely different level. But this time I found my own arguments off short. I'm an OS X user, and I would like to submit to you the latest exploit for this system. As I hope a fix will be running in...
Apple Mac OSX 10.3.x - Help Protocol Remote Code Execution
source: https://www.securityfocus.com/bid/10356/info It has been reported that Mac OS X may be prone to a vulnerability that could allow a remote attacker to execute arbitrary script code on a vulnerable system. The issue presents itself due to the 'help:' protocol implemented by the Mac OS X hel...