152 matches found
APSB21-87: Security hotfix available for RoboHelp Server
Adobe has released a security hotfix for RoboHelp Server. This update resolves a vulnerability rated critical. Successful exploitation could lead to arbitrary code execution in the context of the current user...
The vulnerability of the server-based corporate software for project monitoring and management, RoboHelp Server, arises due to an incorrect path limitation to the restricted access catalog. This allows attackers to read arbitrary files.
The vulnerability of server-based corporate software for project monitoring and management with RoboHelp Server exists due to an incorrect limitation on the path to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially...
CVE-2021-28588
Adobe RoboHelp Server version 2019.0.9 and earlier is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
CVE-2021-28588
Adobe RoboHelp Server version 2019.0.9 and earlier is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
Path traversal
Adobe RoboHelp Server version 2019.0.9 and earlier is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
CVE-2021-28588 Adobe RoboHelp Server folderId Directory Traversal Remote Code Execution Vulnerability
Adobe RoboHelp Server version 2019.0.9 and earlier is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
CVE-2021-28588
CVE-2021-28588 affects Adobe RoboHelp Server up to version 2019.0.9. The root cause is a path traversal flaw in the server when processing requests (notably the folderId parameter), which allows an attacker to execute arbitrary code. Exploitation could occur via a crafted HTTP POST and, per sourc...
CVE-2021-28588: Improper Limitation of a Pathname to a Restricted Directory
Adobe RoboHelp Server version 2019.0.9 and earlier is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
Adobe RoboHelp Server <= 2019.0.9 Arbitrary Code Execution (APSB21-44)
The version of Adobe RoboHelp Server installed on the remote host is less than or equal to 2019.0.9. It is, therefore, affected by an arbitrary code execution vulnerability as referenced in the apsb21-44 advisory. Note that Nessus has not tested for this issue but has instead relied only on the...
Adobe RoboHelp Server folderId Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe RoboHelp Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the RoboHelp server...
Adobe RoboHelp Server Path Traversal Vulnerability
Adobe RoboHelp Server is a server-based application for FrameMaker and RoboHelp enterprise users. A path traversal vulnerability exists in Adobe RoboHelp Server 2019.0.9 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...
CVE-2021-28588
Adobe RoboHelp Server version 2019.0.9 and earlier is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
APSB21-44 Security update available for Adobe RoboHelp Server
Adobe has released a security update for RoboHelp Server. This update resolves a vulnerability rated critical. Successful exploitation could lead to arbitrary code execution in the context of the current user...
Adobe RoboHelp 路径遍历漏洞
Adobe RoboHelp Server is a server-based application for FrameMaker and RoboHelp enterprise users. A path traversal vulnerability exists in Adobe RoboHelp Server 2019.0.9 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...
Adobe RoboHelp Server Unspecified SQLi (APSB16-12)
Adobe RoboHelp Server version 9 is installed on the remote host, and it is missing a hotfix that resolves Adobe security advisory APSB16-12. It is, therefore, affected by an unspecified SQL injection vulnerability due to improper sanitization of user-supplied input before using it in SQL queries...
Adobe RoboHelp Server Security Hotfix (APSB16-12)
Adobe RoboHelp Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe RoboHelp Server Information Disclosure Vulnerability
Adobe RoboHelp Server is the United States of America Odooby Adobe company's set of server-based solutions. The program through the collection and recording of user questions and queries data to provide real-time end-user feedback. An information disclosure vulnerability exists in version 9.0.1 o...
CVE-2016-1035
Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive information via unspecified vectors...