338 matches found
CVE-2009-4434
Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the includefile parameter...
CVE-2009-4433
CVE-2009-4433 affects IDevSpot iSupport 1.8 and earlier. The XSS flaws enable remote injection via: (a) the 5 or (b) 9 field in post to ticket_function.php, reachable via ticket_submit.php and index.php; (c) the which parameter to function.php; or (d) the which parameter to index.php, related to ...
CVE-2009-4434: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the includefile parameter...
CVE-2009-4433: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the a 5 or b 9 field in a post action to ticketfunction.php, reachable through ticketsubmit.php and index.php; c the which parameter to...
iSupport 1.8 - Cross-Site Scripting Local File Inclusion
iSupport 1.8 - Cross-Site Scripting Local File Inclusion --------------------------------------------- ++ iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...
iSupport 1.8 - ticket_function.php Multiple Cross-Site Scripting Vulnerabilities
iSupport 1.8 - ticketfunction.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37380/info iDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker m...
iSupport <= 1.8 XSS/LFI Exploit
Exploit for unknown platform in category web applications =============================== iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...
iSupport <= 1.8 XSS/LFI Exploit
No description provided by source. --------------------------------------------- ++ iSupport = 1.8 ++ XSS/Local File Include Exploit --------------------------------------------- Discovered by : Stink' & Essandre DATE : 16/12/09 ////////////////////////////////////////////////////////////////////...
iSupport 1.8 - index.php?which Cross-Site Scripting
iSupport 1.8 - index.php?which Cross-Site Scripting source: https://www.securityfocus.com/bid/37380/info iDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to...
iSupport 1.8 - 'ticket_function.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37380/info iDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an...
iSupport 1.8 XSS / Local File Inclusion
--------------------------------------------- ++ iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...
iSupport 1.8 - 'index.php?which' Cross-Site Scripting
source: https://www.securityfocus.com/bid/37380/info iDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an...
iSupport 1.8 - Cross-Site Scripting / Local File Inclusion
--------------------------------------------- ++ iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...
CVE-2007-6539
PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local files via the includefile parameter...
CVE-2007-6539
The CVE-2007-6539 entry concerns a PHP local file inclusion in the IDevspot iSupport 1.8 product. The vulnerability arises from index.php’s include_file parameter, enabling remote attackers to include local files. Documented impact is partial confidentiality, integrity, and availability, with a C...
CVE-2007-6539
PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local files via the includefile parameter...
CVE-2007-6539: Improper Control of Generation of Code
PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local files via the includefile parameter...
iSupport v1.8 Local file include vulnerability
iSupport v1.8 Local file Inclusion Vuln found by JuMp-Er http://www.ahc-security.org Script Name : iSupport version : 1.8 Vendor Site : http://www.idevspot.com/iSupport.php Exploit : http://www.site.com/iSupport/index.php?includefile=local file 3 StRoNiX, mawena, ML, n0th1ng...
iDevSpot iSupport 1.8 - index.php Local File Inclusion
iDevSpot iSupport 1.8 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/26961/info iSupport is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and...
iDevSpot iSupport 1.8 - 'index.php' Local File Inclusion
source: https://www.securityfocus.com/bid/26961/info iSupport is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. This issue affects iSupport 1.8;...