4523 matches found
CVE-2019-16954
CVE-2019-16954 affects SolarWinds Web Help Desk 12.7.0 with an HTML injection vulnerability via the Comment in a Help Request ticket. The provided connected documents indicate the flaw is caused by accepting user input in a Comment and injecting it into HTML, but do not provide explicit exploit s...
CVE-2019-16954
SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket...
CVE-2019-16956
SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...
Cross site request forgery (csrf)
SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...
CVE-2019-16956
SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...
SolarWinds Web Help Desk 跨站脚本漏洞
Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and more. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0 that...
Zammad Access Control Error Vulnerability
Zammad is a Web-based open source helpdesk/customer support system. An access control error vulnerability exists in Zammad versions prior to 3.5.1. An attacker can exploit this vulnerability to bypass auditing and change Ticket Article data via REST API calls...
Zammad Access Control Bypass Vulnerability
Zammad is a Web-based open source helpdesk/customer support system. An access control bypass vulnerability exists in Zammad versions prior to 3.5.1. An Agent with Customer privileges in a group can exploit this vulnerability to bypass access control to internal Articles via the Ticket detail view...
Zammad Cross-Site Scripting Vulnerability (CNVD-2020-75062)
Zammad is a Web-based open source helpdesk/customer support system. A stored cross-site scripting vulnerability exists in Zammad versions prior to 3.4.1. An attacker can exploit this vulnerability to execute malicious code via the Tags element in TIcket...
PT-2020-6430 · Otrs Ag · Otrs +1
Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS Community Edition versions 6.0.1 through 6.0.x OTRS AG OTRS versions prior to 7.0.26 Description: The issue is related to a lack of protection of the web page structure in the ticket request system OTRS, allowing an attacker to...
CVE-2020-26035
An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket...
CVE-2020-29160
An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing...
CVE-2020-29160
An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing...
CVE-2020-26035
An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket...
Cross site scripting
An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket...
Design/Logic Flaw
An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing...
Design/Logic Flaw
An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket. permission can access Tickets...
Spoofing
An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended access control on internal Articles via the Ticket detail view...