ViArt Helpdesk - 'product_details.php?category_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

ViArt Helpdesk - 'reviews.php?category_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

ViArt Helpdesk - 'article.php?category_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

ViArt Helpdesk - 'products.php?category_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

ViArt Helpdesk - 'products_search.php?search_category_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

ViArt Helpdesk Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || ViArt Helpdesk Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.viart.com/helpdesk Greetings : Mizoz, Zuka,...

Facil Helpdesk (RFI/LFI/XSS) Multiples Remote Vulnerabilities

No description provided by source. / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Facil Helpdesk RFI/LFI/XSS Multiples Vulnerabilities Discovered By : Moudi Contact : [email protected] Download...

Facil Helpdesk RFI / LFI / XSS

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Facil Helpdesk RFI/LFI/XSS Multiples Vulnerabilities Discovered By : Moudi Contact : Download :...

Facil Helpdesk (RFI/LFI/XSS) Multiples Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Facil Helpdesk RFI/LFI/XSS Multiples Remote Vulnerabilities ============================================================= / Facil Helpdesk RFI/LFI/XSS Multiples Vulnerabilities...

Facil Helpdesk - Local File Inclusion Remote File Inclusion Cross-Site Scripting

Facil Helpdesk - Local File Inclusion Remote File Inclusion Cross-Site Scripting / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Facil Helpdesk RFI/LFI/XSS Multiples Vulnerabilities...

Facil Helpdesk - kbasekbase.php URI Cross-Site Scripting

Facil Helpdesk - kbasekbase.php URI Cross-Site Scripting source: https://www.securityfocus.com/bid/42528/info Facil Helpdesk is prone to multiple input-validation vulnerabilities, including a cross-site scripting vulnerability, a local file-include vulnerability, and a remote file-include...

Facil Helpdesk - 'kbase/kbase.php' URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/42528/info Facil Helpdesk is prone to multiple input-validation vulnerabilities, including a cross-site scripting vulnerability, a local file-include vulnerability, and a remote file-include vulnerability. An attacker can exploit these issues to execute...

Facil Helpdesk - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Facil Helpdesk RFI/LFI/XSS Multiples Vulnerabilities Discovered By : Moudi Contact : Download :...

CVE-2009-0886

Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the defaultlanguage parameter...

CVE-2009-0886

The CVE corresponds to a local file inclusion (LFI) vulnerability in OneOrZero Helpdesk

CVE-2009-0886

Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the defaultlanguage parameter...

OneOrZero Helpdesk 'login.php' Local File Include Vulnerability

OneOrZero Helpdesk is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver process. This may aid in further attacks. OneOrZero...

OneOrZero Helpdesk default_language Local File Inclusion

The remote host is running OneOrZero Helpdesk, a web-based helpdesk application written in PHP. The version of OneOrZero Helpdesk installed on the remote host fails to filter input to the 'defaultlanguage' variable in the 'common/login.php' script before using it to include PHP code. Provided PHP...

Information disclosure

Cerberus Helpdesk before 4.0 Build 600 allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the 1 /display and 2 /kb URIs...

CVE-2008-6440

Cerberus Helpdesk before 4.0 Build 600 allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the 1 /display and 2 /kb URIs...