Published: 08/05/2007 Updated: 16/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote malicious users to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, but the proper identifier for the ipsec-tools issue is CVE-2007-1841.

Vulnerable Product	Search on Vulmon	Subscribe to Product
otrs otrs 2.0.4

Debian Bug report logs - #423524 otrs2: [CVE-2007-2524] XSS vulnerability in indexpl Package: otrs2; Maintainer for otrs2 is Patrick Matthäi <pmatthaei@debianorg>; Source for otrs2 is src:otrs2 (PTS, buildd, popcon) Reported by: SALVETTI Djoume <djoume@taketorg> Date: Sat, 12 May 2007 15:36:02 UTC Severity: norm ...

source: wwwsecurityfocuscom/bid/23862/info OTRS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow the attack ...

CWE-79 http://www.virtuax.be/?page=library&id=35&type=Exploits http://www.securityfocus.com/bid/23862 http://secunia.com/advisories/25205 http://www.debian.org/security/2007/dsa-1298 http://www.novell.com/linux/security/advisories/2007_13_sr.html http://secunia.com/advisories/25419 http://secunia.com/advisories/25787 http://securityreason.com/securityalert/2668 http://www.vupen.com/english/advisories/2007/1698 http://osvdb.org/35821 http://osvdb.org/35822 https://exchange.xforce.ibmcloud.com/vulnerabilities/34164 http://www.securityfocus.com/archive/1/471192/100/0/threaded http://www.securityfocus.com/archive/1/467870/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=423524 https://nvd.nist.gov https://www.exploit-db.com/exploits/29962/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-2524

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect