ActivDesk 3.0 Cross Site Scripting / SQL Injection

ActivDesk 3.0 multiple security vulnerabilities Date: 2011-06-24 Author: Brendan Coles Advisory: http://itsecuritysolutions.org/2011-06-24-ActivDesk-3.0-multiple-security-vulnerabilities/ Software: ActivDesk Version: alert0 http://localhost/PATH/search.cgi?keywords1=alert1...

ActivDesk 3.0 - Multiple Vulnerabilities

ActivDesk 3.0 multiple security vulnerabilities Date: 2011-06-24 Author: Brendan Coles Advisory: http://itsecuritysolutions.org/2011-06-24-ActivDesk-3.0-multiple-security-vulnerabilities/ Software: ActivDesk Version: alert0 http://localhost/PATH/search.cgi?keywords1=alert1...

ActivDesk 3.0 multiple security vulnerabilities

Exploit for cgi platform in category web applications Software: ActivDesk Version: alert0 http://localhost/PATH/search.cgi?keywords1=alert1 http://localhost/PATH/search.cgi?keywords2=alert2 http://localhost/PATH/search.cgi?keywords3=alert3 Blind SQL Injection: http://localhost/PATH/kbcat.cgi?cid=...