Cross Site Scripting (XSS)

uvdesk/community-skeleton is vulnerable to Cross Site Scripting XSS. The vulnerability exists because the library does not properly validate the messages sent by the clients in the ticket, which allows an attacker to inject and execute arbitrary JavaScript into the browser...

GHSA-FWHV-9PHJ-WRJ5 Uvdesk vulnerable to stored cross-site scripting (XSS)

Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...

Uvdesk vulnerable to stored cross-site scripting (XSS)

Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...

GHSA-2HW6-4RV9-82FP Uvdesk remote code execution vulnerability

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...

Uvdesk remote code execution vulnerability

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...

CVE-2023-0325

Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...

CVE-2023-0265

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...

Code injection

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...

Cross site scripting

Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...

PT-2023-16124 · Uvdesk · Uvdesk

Name of the Vulnerable Software and Affected Versions: Uvdesk version 1.1.1 Description: The issue allows an authenticated remote attacker to execute commands on the server due to improper validation of profile pictures uploaded by customers. Recommendations: For Uvdesk version 1.1.1, consider...

CVE-2023-0265

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...

PT-2023-16179 · Uvdesk · Uvdesk

Name of the Vulnerable Software and Affected Versions: Uvdesk version 1.1.1 Description: The issue allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the...

CVE-2023-0325

Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...

Uvdesk 代码问题漏洞

Uvdesk is a complete ticket support system open-sourced by Uvdesk India. A security vulnerability exists in Uvdesk version 1.1.1, which stems from the program not properly validating the profile picture uploaded by the customer, which can be exploited by an attacker to execute commands on the...

CVE-2023-0325

Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...

CVE-2023-0265

CVE-2023-0265 affects Uvdesk 1.1.1. An authenticated remote attacker can execute commands on the server due to improper validation of profile pictures uploaded by customers, enabling remote code execution. The vulnerability is characterized as high risk (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/...

CVE-2023-0325

Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...

CVE-2023-0265

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...

Uvdesk 跨站脚本漏洞

Uvdesk is a complete ticket support system open source by Uvdesk India. A cross-site scripting vulnerability exists in Uvdesk version 1.1.1, which stems from the presence of a stored cross-site scripting XSS vulnerability...

CVE-2023-0265

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...