Published: 04/01/2010 Updated: 17/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 460

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote malicious users to inject arbitrary web script or HTML via the category_id parameter to (1) products.php, (2) article.php, (3) product_details.php, or (4) reviews.php; the (5) forum_id parameter to forum.php; or the (6) search_category_id parameter to products_search.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
viart viart helpdesk 3.4.7
viart viart helpdesk 3.3.2

source: wwwsecurityfocuscom/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This can ...

source: wwwsecurityfocuscom/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This can allo ...

source: wwwsecurityfocuscom/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This can al ...

source: wwwsecurityfocuscom/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This can allow th ...

source: wwwsecurityfocuscom/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This can ...

source: wwwsecurityfocuscom/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This can allow ...

CWE-79 http://osvdb.org/56879 http://osvdb.org/56878 http://osvdb.org/56881 http://osvdb.org/56880 http://secunia.com/advisories/36240 http://packetstormsecurity.org/0908-exploits/viarthd-xss.txt http://osvdb.org/56882 http://osvdb.org/56877 https://exchange.xforce.ibmcloud.com/vulnerabilities/52349 https://nvd.nist.gov https://www.exploit-db.com/exploits/34498/

CVE-2009-4548

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect