Published: 28/11/2006 Updated: 17/10/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 690

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote malicious users to inject arbitrary web script or HTML via the (1) id or email parameter to ticketview.php, or (2) the email parameter to ticket.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ace helpdesk ace helpdesk 2.3.1
inverseflow help desk 2.31
pmos helpdesk pmos helpdesk 2.4

source: wwwsecurityfocuscom/bid/21250/info InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentication cr ...

source: wwwsecurityfocuscom/bid/21250/info InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentication ...

NVD-CWE-Other http://www.attrition.org/pipermail/vim/2006-November/001148.html http://www.securityfocus.com/bid/21250 http://secunia.com/advisories/23052 http://secunia.com/advisories/23070 http://secunia.com/advisories/23071 http://www.osvdb.org/30667 http://www.osvdb.org/34034 http://securityreason.com/securityalert/1928 http://www.vupen.com/english/advisories/2006/4670 http://www.vupen.com/english/advisories/2006/4671 http://www.vupen.com/english/advisories/2006/4672 https://exchange.xforce.ibmcloud.com/vulnerabilities/30489 http://www.securityfocus.com/archive/1/452397/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/29165/

CVE-2006-6158

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect