Oneorzero Oneorzero Helpdesk
5 CVEs affecting Oneorzero Oneorzero Helpdesk. Latest disclosed: 2009-03-12. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-0886 | | 2009-03-12 | Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in… | |
CVE-2007-5727 | | 2007-10-30 | Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, and possibly other versions, allows remot… | |
CVE-2006-5474 | | 2006-10-24 | The "forgot password" function in OneOrZero Helpdesk before 1.6.5.4 generates insecure passwords by concatenating the current timestamp with the username, whic… | |
CVE-2003-0304 | | 2003-06-09 | one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation… | |
CVE-2003-0303 | | 2003-06-09 | SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg p… |