CVE-2009-3068

CVE-2009-3068 affects Adobe RoboHelp Server 8. The vulnerability is an unrestricted/arbitrary file upload in the RoboHelpServer Servlet (robohelp/server). An unauthenticated attacker can upload a JSP file during a PUBLISH action and then access it under the server’s session-specific robohelp/robo...

CVE-2011-2133

Adobe RoboHelp 8/9 (and RoboHelp Server 8/9) are affected by a DOM-based XSS in the URI handling via template_stock/whutils.js, allowing arbitrary script/HTML execution. The issue is documented as CVE-2011-2133; a patch exists to address the vulnerability in RoboHelp/RoboHelp Server prior to 9.0....

CVE-2011-0613

CVE-2011-0613 involves multiple cross-site scripting (XSS) flaws in RoboHelp 7/8 and RoboHelp Server 7/8. The vulnerabilities are tied to RoboHTML/WildFireExt/TemplateStock components and vectors related to wf_status.htm and wf_topicfs.htm, allowing remote attackers to inject arbitrary script or ...

CVE-2010-2885

CVE-2010-2885 concerns an XSS vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8. The connected records specify that the vulnerability arises in the WebHelp generation process with RoboHelp for Word, enabling remote attackers to inject arbitrary web script or HTML. Affected prod...

CVE-2010-2886

CVE-2010-2886 affects Adobe RoboHelp 7/8 and RoboHelp Server 7/8. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Root cause is a vulnerability in how the products handle input/...