CVE-2005-1672

Multiple cross-site scripting XSS vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the 1 find parameter to index.php, 2 name or 3 message field of a chat request, or 4 the message body when opening a trouble ticket...

CVE-2005-1672

Help Center Live (PHP-based live help desk with a MySQL backend) is affected by multiple cross-site scripting (XSS) vulnerabilities identified as CVE-2005-1672. The XSS can be triggered by untrusted input in several fields: the find parameter to index.php, the name or message field of a chat requ...

CVE-2005-1672

Multiple cross-site scripting XSS vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the 1 find parameter to index.php, 2 name or 3 message field of a chat request, or 4 the message body when opening a trouble ticket...

CVE-2005-1672: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the 1 find parameter to index.php, 2 name or 3 message field of a chat request, or 4 the message body when opening a trouble ticket...

CVE-2005-1446

SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticket...

CVE-2005-1446

SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticket...

CVE-2005-1446: Undefined Security Weakness

SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticket...

CVE-2004-1467

Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 date or search text field in the calendar module, 2 Field parameter, Filter parameter, QField parameter, Start parameter or Search field in th...

CVE-2004-1467: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 date or search text field in the calendar module, 2 Field parameter, Filter parameter, QField parameter, Start parameter or Search field in th...

CVE-2004-1467

Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 date or search text field in the calendar module, 2 Field parameter, Filter parameter, QField parameter, Start parameter or Search field in th...

SSH < 1.2.28 Kerberos NFS Share Ticket Disclosure

Binary data 1977.prm...

CVSTrac Ticket Title Arbitrary Command Execution

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to ticket titles containing a semi-colon ';' that may allow an attacker to execute arbitrary commands on the system. Nessus has determined the vulnerability...

FreeBSD : leafnode fetchnews denial-of-service triggered by truncated transmission (88)

The following package needs to be updated: leafnode %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkga051a4ec3aa14dd19bdca61eb5700153.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

CVE-2004-0613

osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory...

CVE-2004-0613: Undefined Security Weakness

osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory...

security flaw

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake that causes an...

CVE-2003-0303

SQL injection vulnerability in one||zero aka One or Zero Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter...

CVE-2003-0303

SQL injection vulnerability in one||zero aka One or Zero Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter...

CVE-2003-0303

CVE-2003-0303 corresponds to a SQL injection in OneOrZero Helpdesk 1.4 RC4. The vulnerability allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter (tupdate.php), affecting the integrity of the helpdesk data without affecting confidentiality. Connected source...

CVE-2003-0303: Undefined Security Weakness

SQL injection vulnerability in one||zero aka One or Zero Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter...