CVE-2018-10051

iScripts SupportDesk v4.3 has XSS via the staff/inteligentsearchresult.php txtinteligentsearch parameter...

CVE-2018-10052

The affected software is iScripts SupportDesk v4.3. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the admin/inteligentsearchresult.php txtinteligentsearch parameter. Root cause (as stated in connected documents) is improper input handling in that parameter leading to scri...

CVE-2018-10051: Improper Neutralization of Input During Web Page Generation

iScripts SupportDesk v4.3 has XSS via the staff/inteligentsearchresult.php txtinteligentsearch parameter...

CVE-2018-10052: Improper Neutralization of Input During Web Page Generation

iScripts SupportDesk v4.3 has XSS via the admin/inteligentsearchresult.php txtinteligentsearch parameter...

PT-2018-9643

Name of the Vulnerable Software and Affected Versions: iScripts SupportDesk version 4.3 Description: The issue is related to a security problem where an attacker can inject malicious code. The problem occurs due to the lack of proper input validation in the txtinteligentsearch parameter of the...

PT-2018-9644

Name of the Vulnerable Software and Affected Versions: iScripts SupportDesk version 4.3 Description: The issue is related to a security problem where an attacker can inject malicious code. Specifically, it involves the txtinteligentsearch parameter in the "admin/inteligentsearchresult.php"...