OneOrZero helpdesk 1.6.x. - Arbitrary File Upload

!/usr/bin/perl =about OneOrZero 1.6. Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: In 'tinfo.php' script there are function named uploadAttachment through which we are able to upload files. It does not checks what the file is uploaded. EXPLOIT WORK:...

OneOrZero helpdesk 1.6.*. Remote Shell Upload Exploit

Exploit for unknown platform in category web applications ===================================================== OneOrZero helpdesk 1.6.. Remote Shell Upload Exploit ===================================================== !/usr/bin/perl =about OneOrZero 1.6. Perl exploit AUTHOR discovered & written ...

CVE-2007-5727

Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, and possibly other versions, allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary web script or HTML via XSS sequences without SCRIPT tags in t...

CVE-2007-5727

Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, and possibly other versions, allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary web script or HTML via XSS sequences without SCRIPT tags in t...

CVE-2007-5727

CVE-2007-5727 describes an incomplete blacklist vulnerability in OneOrZero Helpdesk (common.php, stripScripts) that allows remote XSS via the description parameter to tcreate.php or tupdate.php (e.g., using an onmouseover event in a tag). Affected versions include 1.6.5.4 and 1.6.4.2, with poten...

OneOrZero Helpdesk以不安全方式生成口令漏洞

OneOrZero Helpdesk是一个PHP/MySQL帮助桌面软件。 OneOrZero生成访问口令的方式上存在漏洞，攻击者可以利用此漏洞推测出自动生成的口令。 OneOrZero的forgot password函数会在回答完安全问题后重置口令，默认下这个口令为空。用户可以通过重置管理员口令并保持回答为空强制重置口令。但是，由于口令重置函数是基于用户名和服务器时间来设置口令的，因此可以通过服务器的时间来判断所设置的口令。 OneOrZero OneOrZero 1.6.0 - 1.6.4 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-5474

The "forgot password" function in OneOrZero Helpdesk before 1.6.5.4 generates insecure passwords by concatenating the current timestamp with the username, which allows remote attackers to gain access as an arbitrary user by requesting a password reset...

CVE-2006-5474

The CVE-2006-5474 entry concerns OneOrZero Helpdesk versions before 1.6.5.4. Root cause: the forgot-password function generates passwords by concatenating the current timestamp with the username, enabling remote attackers to gain access to an arbitrary user via a password reset request. Impact: u...

Advisory for Oneorzero helpdesk

Permanant Link : http://www.whitedust.net/speaks/3043/ ------------------------------------------------------------ - Advisory for OneOrZero Helpdesk - ------------------------------------------------------------ - OneOrZero Helpdesk - AFFECTED PRODUCTS ================= OneOrZero Helpdesk v1.6.0...

OneOrZero.txt

vendor: http://www.oneorzero.com/ vuln : http://host/supporter/index.php?t=tupd&id=SQL http://host/supporter/index.php?t=tupd&id=XSS Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran HackerZ Security Team...

CVE-2006-4350

SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4351

Cross-site scripting XSS vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2006-4350

The CVE-2006-4350 issue affects OneOrZero 1.6.4.1 where a flaw in index.php allows SQL injection through the id parameter. The underlying root cause is improper handling of user-supplied input in a SQL query, enabling remote commands execution. Documented impact indicates partial confidentiality,...

CVE-2006-4351

The CVE-2006-4351 entry concerns a cross-site scripting (XSS) vulnerability in OneOrZero 1.6.4.1, found in index.php, exploitable by supplying a crafted id parameter to inject arbitrary script/HTML. The attached CVSS data assigns a base score of 6.8 (MEDIUM) with network attack vector, no authent...

CVE-2006-4351

Cross-site scripting XSS vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2006-4350

SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

OneOrZero Helpdesk V1.6.4.1 susceptible to SQL injection and XSS

vendor: http://www.oneorzero.com/ vuln : http://host/supporter/index.php?t=tupd&id=SQL http://host/supporter/index.php?t=tupd&id=XSS Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran HackerZ Security Team...

Sql injection

SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the kans action...

CVE-2006-1501

SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the kans action...

CVE-2006-1501

CVE-2006-1501 describes a SQL injection in OneOrZero 1.6.3.0, where the vulnerable vector is the id parameter (possibly in the kans action) in index.php. The vulnerability allows remote attackers to alter SQL commands; CVSS v2 base score is 7.5 ( HIGH ) with network access, low attack complexity,...