Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the (1) id or email parameter to ticketview.php, or (2) the email parameter to ticket.php.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/advisories/23071 | third-party-advisory x_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/4672 | vdb-entry x_refsource_VUPEN |
| http://www.osvdb.org/30667 | vdb-entry x_refsource_OSVDB |
| http://www.vupen.com/english/advisories/2006/4671 | vdb-entry x_refsource_VUPEN |
| http://www.securityfocus.com/bid/21250 | vdb-entry x_refsource_BID |
| http://secunia.com/advisories/23070 | third-party-advisory x_refsource_SECUNIA |
| http://www.securityfocus.com/archive/1/452397/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| http://www.vupen.com/english/advisories/2006/4670 | vdb-entry x_refsource_VUPEN |
| http://www.osvdb.org/34034 | vdb-entry x_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/30489 | vdb-entry x_refsource_XF |
| http://secunia.com/advisories/23052 | third-party-advisory x_refsource_SECUNIA |
| http://www.attrition.org/pipermail/vim/2006-November/001148.html | mailing-list x_refsource_VIM |
| http://securityreason.com/securityalert/1928 | third-party-advisory x_refsource_SREASON |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/advisories/23071 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.vupen.com/english/advisories/2006/4672 | vdb-entry x_refsource_VUPEN x_transferred |
| http://www.osvdb.org/30667 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.vupen.com/english/advisories/2006/4671 | vdb-entry x_refsource_VUPEN x_transferred |
| http://www.securityfocus.com/bid/21250 | vdb-entry x_refsource_BID x_transferred |
| http://secunia.com/advisories/23070 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.securityfocus.com/archive/1/452397/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://www.vupen.com/english/advisories/2006/4670 | vdb-entry x_refsource_VUPEN x_transferred |
| http://www.osvdb.org/34034 | vdb-entry x_refsource_OSVDB x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/30489 | vdb-entry x_refsource_XF x_transferred |
| http://secunia.com/advisories/23052 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.attrition.org/pipermail/vim/2006-November/001148.html | mailing-list x_refsource_VIM x_transferred |
| http://securityreason.com/securityalert/1928 | third-party-advisory x_refsource_SREASON x_transferred |