CVE-2009-4861

2010-05-1112:02:09

CWE-79

web.nvd.nist.gov

cve-2009-4861

cross-site scripting

xss vulnerability

supportpro supportdesk 3.0

shownews.php

path_info

nvd

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.6%

CPENameOperatorVersion
supportpro:supportdesksupportpro supportdeskeq3.0

CPE	Name	Operator	Version
supportpro:supportdesk	supportpro supportdesk	eq	3.0

References

packetstormsecurity.org/0908-exploits/supportpro-xss.txt

secunia.com/advisories/36242