VendorsUbertechelp_center_live1.2.3
Vulnerabilities

Ubertec Help Center Live 1.2.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2006-2039
Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
Published 2006-04-26 · Modified
7.5EPSS 0.012
CVE-2004-2602
PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) before 1.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the HCL_path parameter to pipe.php.
Published 2005-11-29 · Modified
6.8EPSS 0.019
CVE-2004-2603
Cross-site scripting (XSS) vulnerability in the Search module in UberTec Help Center Live (HCL) allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php.
Published 2005-11-29 · Modified
4.3EPSS 0.014