VendorsUbertechelp_center_live1.2.6
Vulnerabilities

Ubertec Help Center Live 1.2.6

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2006-2039
Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
Published 2006-04-26 · Modified
7.5EPSS 0.012
CVE-2004-2602
PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) before 1.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the HCL_path parameter to pipe.php.
Published 2005-11-29 · Modified
6.8EPSS 0.019
CVE-2004-2601
PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) allows remote attackers to read local files and possibly execute PHP code via a URL in the SKIN_inner parameter to inc/skin.php.
Published 2005-11-29 · Modified
6.4EPSS 0.015
CVE-2004-2603
Cross-site scripting (XSS) vulnerability in the Search module in UberTec Help Center Live (HCL) allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php.
Published 2005-11-29 · Modified
4.3EPSS 0.014