PHP Helpdesk 0.6.16 Index.PHP Local File Include Vulnerability

No description provided by source. source: www.securityfocus.com/bid/26318/info PHP Helpdesk is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. PHP...

PHP Helpdesk Login SQL注入漏洞

PHP Helpdesk是一款基于PHP的WEB应用程序。 PHP Helpdesk不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或未授权访问应用程序。 问题是由于登录脚本对用户提交的参数缺少过滤，提交恶意SQL查询作为参数数据，可绕过验证未授权访问应用程序。 PHP Helpdesk 0.6.16 目前没有详细解决方案提供： http://phphelpdesk.sourceforge.net/...

PHP Helpdesk 0.6.16 - 'index.php' Local File Inclusion

source: www.securityfocus.com/bid/26318/info PHP Helpdesk is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. PHP Helpdesk 0.6.16 is vulnerable to th...

PHP Helpdesk 0.6.16 - index.php Local File Inclusion

PHP Helpdesk 0.6.16 - index.php Local File Inclusion source: www.securityfocus.com/bid/26318/info PHP Helpdesk is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute...