4547 matches found
Cross site scripting
Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting XSS - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3...
CVE-2019-1010018
Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting XSS - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3...
CVE-2019-1010307
GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting XSS. The impact is: All dropdown values are vulnerable to XSS leading to privilege escalation and executing js on admin. The component is: /glpi/ajax/getDropDownValue.php. The attack vector is: 1- User Create a ticket , 2- Admin opens...
CVE-2019-1010307
GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting XSS. The impact is: All dropdown values are vulnerable to XSS leading to privilege escalation and executing js on admin. The component is: /glpi/ajax/getDropDownValue.php. The attack vector is: 1- User Create a ticket , 2- Admin opens...
CVE-2019-13397
Unauthenticated Stored XSS in osTicket 1.10.1 allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via arbitrary file extension while creating a support ticket...
CVE-2019-13397
Unauthenticated Stored XSS in osTicket 1.10.1 allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via arbitrary file extension while creating a support ticket...
Cross site scripting
Unauthenticated Stored XSS in osTicket 1.10.1 allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via arbitrary file extension while creating a support ticket...
Open Ticket Request System Code Injection Vulnerability
Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the service...
DEBIAN-CVE-2018-11563
An issue was discovered in Open Ticket Request System OTRS 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged in customer's browser in the context of the OTRS customer panel application...
Design/Logic Flaw
An issue was discovered in Open Ticket Request System OTRS 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged in customer's browser in the context of the OTRS customer panel application...
UBUNTU-CVE-2018-11563
An issue was discovered in Open Ticket Request System OTRS 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged in customer's browser in the context of the OTRS customer panel application...
PT-2019-8786 · Otrs · Otrs
Name of the Vulnerable Software and Affected Versions: Open Ticket Request System OTRS versions 6.0.x through 6.0.7 Description: An issue was discovered where a carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged-in customer's browse...
OPENSUSE-SU-2019:1682-1 Security update for libheimdal
This update for libheimdal fixes the following issues: libheimdal was updated to version 7.7.0: + Bug fixes: - PKCS11 hcrypto back-end: + initialize the p11moduleload function list + verify that not only is a mechanism present but that its mechanism info states that it offers the required...
CVE-2019-12963
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action...
CVE-2019-12963
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action...
CVE-2019-12964
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject...
CVE-2019-12963
LiveZilla Server is affected by CVE-2019-12963: prior to 8.0.1.1, the chat.php Create Ticket action is vulnerable to cross-site scripting (XSS). This is confirmed by multiple sources (NVD/Red Hat/CNVD/OpenVAS references) and is characterized by XSS in the Create Ticket/Work Order path. Exploitati...
CVE-2019-12963
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action...
CVE-2019-10085
In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or editing tickets. The XSS executes when a user engages with that dropdown on that page...