RoboHelp Server Help Errors Multiple Vulnerabilities (APSB08-16)
Medium Nessus Plugin ID 33476
SynopsisThe remote Windows host has an application that is affected by multiple vulnerabilities.
DescriptionThe installation of Adobe RoboHelp Server on the remote host is version 7.00 or older and does not contain the APSB08-16 update file.
As a result, it is probably affected by a SQL injection and a cross-site scripting vulnerability. The SQL injection issue reportedly can be exploited to manipulate queries against the RoboHelp back-end database either by an authenticated attacker who sends a specially crafted HTTP request to the server or by an unauthenticated attacker who tricks an authenticated user into clicking on a malicious link.
SolutionApply the patch referenced in the vendor advisory above.