Klemen Stirn HESK Cross-Site Scripting Vulnerability

Klemen Stirn HESK is a helpdesk software package with an integrated knowledge base from Klemen Stirn, Slovenia. A cross-site scripting vulnerability exists in Klemen Stirn HESK versions prior to 3.1.10, which stems from a lack of proper validation of client-side data by the WEB application and ca...

Multiple XSS in HESK

Vulnerability ID: HTB23030 Reference: http://www.htbridge.ch/advisory/multiplexssinhesk.html Product: HESK Vendor: Klemen Stirn http://www.hesk.com/ Vulnerable Version: 2.2 and probably prior Tested on: 2.2 Vendor Notification: 06 July 2011 Vulnerability Type: XSS Cross Site Scripting Risk level:...