3 matches found
CVE-2011-2133
Adobe RoboHelp 8/9 (and RoboHelp Server 8/9) are affected by a DOM-based XSS in the URI handling via template_stock/whutils.js, allowing arbitrary script/HTML execution. The issue is documented as CVE-2011-2133; a patch exists to address the vulnerability in RoboHelp/RoboHelp Server prior to 9.0....
CVE-2016-1035
Adobe RoboHelp Server 9 (before 9.0.1) is affected by an unspecified SQL injection vulnerability due to improper sanitization of user input in SQL queries. An unauthenticated, remote attacker could disclose arbitrary data via unspecified vectors. The issue is associated with APSB16-12, and Adobe ...
CVE-2012-0765
Adobe RoboHelp for Word (versions 8 and 9) is affected by multiple XSS vulnerabilities via crafted URLs targeting specific .htm files in template_stock and template_csh directories. The issue can allow remote attackers to execute arbitrary script in the user’s browser. Public references indicate ...