Adobe Fixes Shockwave Hole In February Patch

Adobe issued two security bulletins on Tuesday, fixing a critical security vulnerabilities in Shockwave Player, and another affecting its RoboHelp authoring product. The company’s Product Security Incident Report Team PSIRT issued two security bulletins Tuesday, identified as APSB12-02 and...

Adobe Releases Security Bulletins for Adobe Shockwave Player and RoboHelp

Adobe has released a security bulletins for Adobe Shockwave Player and RoboHelp to address multiple vulnerabilities affecting the following software versions: Adobe Shockwave Player 11.6.3.633 and earlier versions for Windows and Macintosh Adobe RoboHelp 9 or 8 for Word on Windows Exploitation of...

Adobe Robohelp Server 8 Upload

Adobe RoboHelp Server 8 Arbitrary File Upload Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and 9, allows remote attackers to inject arbitrary web script or HTML via the URI, related to templatestock/whutils.js...

CVE-2011-2133

Cross-site scripting XSS vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and 9, allows remote attackers to inject arbitrary web script or HTML via the URI, related to templatestock/whutils.js...

CVE-2011-2133

Adobe RoboHelp 8/9 (and RoboHelp Server 8/9) are affected by a DOM-based XSS in the URI handling via template_stock/whutils.js, allowing arbitrary script/HTML execution. The issue is documented as CVE-2011-2133; a patch exists to address the vulnerability in RoboHelp/RoboHelp Server prior to 9.0....

CVE-2011-2133

Cross-site scripting XSS vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and 9, allows remote attackers to inject arbitrary web script or HTML via the URI, related to templatestock/whutils.js...

Adobe RoboHelp 9 - DOM Cross-Site Scripting

Adobe RoboHelp 9 - DOM Cross-Site Scripting Details for the CVE - 2011-2133 - Adobe RoboHelp9 DOM Cross Site Scripting below have been published at the following URLs: PDF version: http://www.security-assessment.com/files/documents/advisory/AdobeRoboHelp9-DOMXSS.pdf HTML version:...

Adobe RoboHelp 9 - DOM Cross-Site Scripting

Details for the CVE - 2011-2133 - Adobe RoboHelp9 DOM Cross Site Scripting below have been published at the following URLs: PDF version: http://www.security-assessment.com/files/documents/advisory/AdobeRoboHelp9-DOMXSS.pdf HTML version:...

Adobe RoboHelp FlashHelp Unspecified XSS (APSB11-09) (uncredentialed check)

The published RoboHelp project on the remote host contains a cross-site scripting vulnerability in its wfstatus.htm and wftopicfs files. An attacker may be able to leverage this issue to execute arbitrary script code in the browser of an authenticated user in the context of the affected site and ...

Adobe RoboHelp FlashHelp Unspecified XSS (APSB11-09) (credentialed check)

The version of RoboHelp on the remote host contains a cross-site scripting vulnerability in its FlashHelp and FlashHelp Pro output. An attacker may be able to leverage this issue to execute arbitrary script code in the browser of an authenticated user in the context of the affected site and to...

CVE-2011-0613

Multiple cross-site scripting XSS vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to 1 wfstatus.htm and 2 wftopicfs.htm in RoboHTML/WildFireExt/TemplateStock/...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to 1 wfstatus.htm and 2 wftopicfs.htm in RoboHTML/WildFireExt/TemplateStock/...

CVE-2011-0613

CVE-2011-0613 involves multiple cross-site scripting (XSS) flaws in RoboHelp 7/8 and RoboHelp Server 7/8. The vulnerabilities are tied to RoboHTML/WildFireExt/TemplateStock components and vectors related to wf_status.htm and wf_topicfs.htm, allowing remote attackers to inject arbitrary script or ...

CVE-2011-0613

Multiple cross-site scripting XSS vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to 1 wfstatus.htm and 2 wftopicfs.htm in RoboHTML/WildFireExt/TemplateStock/...

Adobe RoboHelp Server 8 - Arbitrary File Upload / Execution (Metasploit)

$Id: adoberobohelperauthbypass.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-2885

Cross-site scripting XSS vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generation with RoboHelp for Word...

CVE-2010-2886

Multiple cross-site scripting XSS vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generation with RoboHelp for Word...