Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:50 a.m.2 views

CVE-2009-4861

Cross-site scripting XSS vulnerability in shownews.php in SupportPRO SupportDesk 3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

4.3CVSS5.9AI score0.00263EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2009-4824

Malware in sbrugna...

4.3CVSS6.4AI score0.00263EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2005-3834

Malware in sbrugna...

4.3CVSS6.4AI score0.00427EPSS
Exploits0References6
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.12 views

SupportPRO SupportDesk 3.0 'shownews.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36001/info SupportPRO SupportDesk is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

7.1AI score
Exploits0
NVD
NVD
added 2010/05/11 12:2 p.m.9 views

CVE-2009-4861

Cross-site scripting XSS vulnerability in shownews.php in SupportPRO SupportDesk 3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

4.3CVSS5.7AI score0.00263EPSS
Exploits1References2
Prion
Prion
added 2010/05/11 12:2 p.m.8 views

Cross site scripting

Cross-site scripting XSS vulnerability in shownews.php in SupportPRO SupportDesk 3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

4.3CVSS6.1AI score0.00263EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2010/05/10 8:0 p.m.16 views

CVE-2009-4861

Cross-site scripting XSS vulnerability in shownews.php in SupportPRO SupportDesk 3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

5.7AI score0.00263EPSS
Exploits1References2
CVE
CVE
added 2010/05/10 8:0 p.m.36 views

CVE-2009-4861

CVE-2009-4861 : A cross-site scripting (XSS) vulnerability in SupportPRO SupportDesk 3.0’s shownews.php allows injecting arbitrary script/HTML via PATH_INFO. Affected component is the shownews.php handling in SupportDesk 3.0; root cause is unvalidated PATH_INFO input leading to script injection. ...

4.3CVSS5.8AI score0.00263EPSS
Exploits1References2Affected Software1
exploitpack
exploitpack
added 2009/08/10 12:0 a.m.14 views

SupportPRO SupportDesk 3.0 - shownews.php Cross-Site Scripting

SupportPRO SupportDesk 3.0 - shownews.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36001/info SupportPRO SupportDesk is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

6.8AI score
Exploits0
Exploit DB
Exploit DB
added 2009/08/10 12:0 a.m.22 views

SupportPRO SupportDesk 3.0 - 'shownews.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36001/info SupportPRO SupportDesk is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2009/08/07 12:0 a.m.22 views

SupportPRO SupportDesk 3.0 XSS

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || SupportPRO SupportDesk 3.0 Remote XSS URI Vulnerabilities Discovered By : Moudi Contact : Download : http://www.supportpro.net/ Greetings :...

7.4AI score
Exploits0
NVD
NVD
added 2005/11/26 10:3 p.m.8 views

CVE-2005-3839

Cross-site scripting XSS vulnerability in SupportPRO Supportdesk allows remote attackers to inject arbitrary web script or HTML via the 1 post tickers and 2 view tickets options...

4.3CVSS5.7AI score0.00427EPSS
Exploits0References5
Cvelist
Cvelist
added 2005/11/26 10:0 p.m.14 views

CVE-2005-3839

Cross-site scripting XSS vulnerability in SupportPRO Supportdesk allows remote attackers to inject arbitrary web script or HTML via the 1 post tickers and 2 view tickets options...

5.7AI score0.00427EPSS
Exploits0References5
CVE
CVE
added 2005/11/26 10:0 p.m.30 views

CVE-2005-3839

CVE-2005-3839 describes a cross-site scripting (XSS) vulnerability in SupportPRO Supportdesk. The flaw allows remote attackers to inject arbitrary web script or HTML via the post tickers and view tickets options. Public references consistently identify the issue as an XSS in the web interface, wi...

4.3CVSS6AI score0.00427EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder