Helpdesk Issue Manager 0.x - find.php Multiple SQL Injections

Helpdesk Issue Manager 0.x - find.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15604/info Helpdesk Issue Manager is prone to multiple SQL injection vulnerabilities. Successful exploitation could result in a compromise of the application, disclosure or modification of data...

Helpdesk Issue Manager 0.x - 'find.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15604/info Helpdesk Issue Manager is prone to multiple SQL injection vulnerabilities. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the...

CVE-2005-3819

Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL commands and bypass authentication via the 1 username and 2 date parameter in the HelpDesk module...

CVE-2005-3819

Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL commands and bypass authentication via the 1 username and 2 date parameter in the HelpDesk module...

CVE-2005-3819: Undefined Security Weakness

Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL commands and bypass authentication via the 1 username and 2 date parameter in the HelpDesk module...

Helpdesk Issue Manager v0.9 SQL inj.

Helpdesk Issue Manager v0.9 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/helpdesk-issue-manager-v09-sql-inj.html Vendor:http://helpdesk.centralmanclc.com/ affected vesion:v0.9 and prior Vuln. Description: Input passed to the "id"...

CVE-2004-2562

SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises LBE Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2004-2562

CVE-2004-2562 describes an SQL injection in Leigh Business Enterprises (LBE) Web Helpdesk’s jobedit.asp via the id parameter. Affected versions are prior to 4.0.0.81. The root cause is improper handling of the id parameter, enabling remote execution of arbitrary SQL commands (impacting confidenti...

CVE-2004-2562: Undefined Security Weakness

SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises LBE Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3502

attachmentsend.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified fileid parameter...

CVE-2005-3502

attachmentsend.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified fileid parameter...

CVE-2005-3502

The CVE-2005-3502 entry concerns Cerberus Helpdesk: the attachment_send.php component is vulnerable to an unauthorized access flaw where a modified file_id parameter lets remote attackers view attachments and tickets of other users. The available sources confirm the affected product and the acces...

CVE-2005-3502: Undefined Security Weakness

attachmentsend.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified fileid parameter...

cerberusDownload.txt

------=Part170374079956.1131094279524 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline hi, I have found a vulnerability in cerberus helpdesk latest stable version, caused by insufficient authentication checks and leads to access ...

CVE-2005-3005

Helpdesk Software Hesk allows remote attackers to bypass authentication for 1 admin.php and 2 adminmain.php by modifying the PHPSESSID session ID parameter or cookie...

CVE-2005-3005

Helpdesk Software Hesk allows remote attackers to bypass authentication for 1 admin.php and 2 adminmain.php by modifying the PHPSESSID session ID parameter or cookie...

CVE-2005-3005

The CVE-2005-3005 issue affects Helpdesk Software Hesk: an authentication bypass via manipulation of the PHPSESSID value (session ID) in admin.php and admin_main.php. Attackers can bypass login remotely by altering the session ID cookie/parameter to gain access without valid credentials; affected...

CVE-2005-2843

Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass authentication via a direct request to adminmain.php...

CVE-2005-2843

Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass authentication via a direct request to adminmain.php...

CVE-2005-2843

CVE-2005-2843 affects the Helpdesk software Hesk 0.92 . The issue is an authentication bypass where remote attackers can bypass login by sending a direct request to admin_main.php . The vulnerability enables partial confidentiality, integrity, and availability impact as per the CVSS data (network...