RoboHelp Server Help Errors Multiple Vulnerabilities (APSB08-16)

Medium Nessus Plugin ID 33476


The remote Windows host has an application that is affected by multiple vulnerabilities.


The installation of Adobe RoboHelp Server on the remote host is version 7.00 or older and does not contain the APSB08-16 update file.
As a result, it is probably affected by a SQL injection and a cross-site scripting vulnerability. The SQL injection issue reportedly can be exploited to manipulate queries against the RoboHelp back-end database either by an authenticated attacker who sends a specially crafted HTTP request to the server or by an unauthenticated attacker who tricks an authenticated user into clicking on a malicious link.


Apply the patch referenced in the vendor advisory above.

See Also

Plugin Details

Severity: Medium

ID: 33476

File Name: robohelpserver_apsb08_16.nasl

Version: $Revision: 1.13 $

Type: local

Agent: windows

Family: Windows

Published: 2008/07/11

Modified: 2016/11/02

Dependencies: 13855

Risk Information

Risk Factor: Medium


Base Score: 6.5

Temporal Score: 5.4

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:adobe:robohelp_server

Required KB Items: SMB/Registry/Enumerated

Exploit Available: true

Exploit Ease: Exploits are available

Reference Information

CVE: CVE-2008-2991

BID: 30137

OSVDB: 46867, 51452

Secunia: 31001

CWE: 79