Cerberus Helpdesk Cross Site Scripting

Title : Cerberus Helpdesk XSS Vulnerability Author : Suliman From = EN|GMA7 Team Tested on : windows and Linux Homepage : www.enigma7.net Contact : [email protected] Thanks to : Zaid - Mohammad - Hussain POC:...

Sql injection

SQL injection vulnerability in the Helpdesk mghelp extension 1.1.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-0333

SQL injection vulnerability in the Helpdesk mghelp extension 1.1.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-0333

CVE-2010-0333 concerns a SQL injection in TYPO3’s Helpdesk extension (mg_help) versions up to 1.1.6 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Public references describe the affected component as the mg_help TYPO3 extension; t...

CVE-2010-0333

SQL injection vulnerability in the Helpdesk mghelp extension 1.1.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2010-2124 · Typo3 · Typo3 Helpdesk (Mg Help) Extension

Name of the Vulnerable Software and Affected Versions: TYPO3 Helpdesk mg help extension version 1.1.6 and earlier Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations: For versions 1.1.6 and earlier, update to a version later than 1.1.6 to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the categoryid parameter to 1 products.php, 2 article.php, 3 productdetails.php, or 4 reviews.php; the 5 forumid parameter to forum.php; or the 6...

Cross site scripting

Cross-site scripting XSS vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-4543

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-4544

Cross-site scripting XSS vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-4548

Multiple cross-site scripting XSS vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the categoryid parameter to 1 products.php, 2 article.php, 3 productdetails.php, or 4 reviews.php; the 5 forumid parameter to forum.php; or the 6...

CVE-2009-4543

CVE-2009-4543 affects Cromosoft Technologies Facil Helpdesk 2.3 Lite. The issue is a PHP remote file inclusion in index.php via the lng parameter, which can also be triggered to include and execute local files through .. sequences. Documented impact is arbitrary PHP code execution with network ac...

CVE-2009-4548

ViArt Helpdesk 3.x is affected by multiple cross-site scripting (XSS) vulnerabilities. The issue can be triggered by user-supplied input in several parameters: category_id to products.php, article.php, product_details.php, or reviews.php; forum_id to forum.php; and search_category_id to products_...

CVE-2009-4548

Multiple cross-site scripting XSS vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the categoryid parameter to 1 products.php, 2 article.php, 3 productdetails.php, or 4 reviews.php; the 5 forumid parameter to forum.php; or the 6...

CVE-2009-4544

The CVE-2009-4544 issue affects Cromosoft Technologies Facil Helpdesk 2.3 Lite’s kbase/kbase.php, where a Cross-site Scripting (XSS) flaw allows remote attackers to inject arbitrary web script or HTML via PATH_INFO. The NVD records a MEDIUM severity (CVSS v2 base score 4.3) with network access an...

CVE-2009-4544

Cross-site scripting XSS vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

Helpdesk Pilot Knowledge Base SQL injection vulnerability - (article_id)

No description provided by source. Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version :...

Helpdesk Pilot Knowledge Base SQL Injection

Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version : 4.4.0 or lower maybe also affected ...

Helpdesk Pilot Knowledge Base SQL injection vulnerability

No description provided by source. Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version :...

Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection

Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version : 4.4.0 or lower maybe also affected ...