Bugsalert.com
Security News about Viruses, Spyware,
Trojans, Malware, XSS attacks.

CVE-2007-6550 (PMOS Helpdesk)

BugsAlert Home > CVE-2007-6550 (PMOS Helpdesk)
 
 

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.




Original Source: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-6550

Learn more about CVE-2007-6550 (PMOS Helpdesk)
 
Tags: cve-2007-6550 pmos helpdesk

Related Items

      CVE-2008-1272 (BM Classifieds)

      Bugtraq: xeCMS 1.x.x Remote File Disclosure Vulnerability.

      CVE-2007-6238 (Quicktime)

      FrSIRT - phpMyAdmin Javascript Escaping Cross Site Scripting Vulnerability

      CVE-2008-0740 (WebSphere Application Server)

      FrSIRT - Adobe AIR Multiple Code Execution and Security Bypass Vulnerabilities

      Bugtraq: Siemens C450IP/C475IP DoS

 

Pixel