102 matches found
PT-2023-16124 · Uvdesk · Uvdesk
Name of the Vulnerable Software and Affected Versions: Uvdesk version 1.1.1 Description: The issue allows an authenticated remote attacker to execute commands on the server due to improper validation of profile pictures uploaded by customers. Recommendations: For Uvdesk version 1.1.1, consider...
CVE-2023-0325
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...
Uvdesk 代码问题漏洞
Uvdesk is a complete ticket support system open-sourced by Uvdesk India. A security vulnerability exists in Uvdesk version 1.1.1, which stems from the program not properly validating the profile picture uploaded by the customer, which can be exploited by an attacker to execute commands on the...
PT-2023-16179 · Uvdesk · Uvdesk
Name of the Vulnerable Software and Affected Versions: Uvdesk version 1.1.1 Description: The issue allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the...
CVE-2023-0325
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...
CVE-2023-0265
CVE-2023-0265 affects Uvdesk 1.1.1. An authenticated remote attacker can execute commands on the server due to improper validation of profile pictures uploaded by customers, enabling remote code execution. The vulnerability is characterized as high risk (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/...
CVE-2023-0265
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...
CVE-2023-0325
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...
CVE-2023-0325
Uvdesk 1.1.1 contains a stored XSS vulnerability that can be exploited by an unauthenticated remote attacker. The issue arises because the application does not correctly validate messages submitted by clients in tickets, enabling arbitrary script execution in the victim’s browser. Multiple connec...
CVE-2023-0265
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...
Uvdesk 跨站脚本漏洞
Uvdesk is a complete ticket support system open source by Uvdesk India. A cross-site scripting vulnerability exists in Uvdesk version 1.1.1, which stems from the presence of a stored cross-site scripting XSS vulnerability...
Cross-site Scripting (XSS)
uvdesk/community-skeleton is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the library does not properly validate the user-supplied input before being rendered, allowing an attacker to inject and execute malicious JavaScript in the browser...
GHSA-HFXP-J95J-CWRP uvdesk/community-skeleton vulnerable to Stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...
uvdesk/community-skeleton vulnerable to Stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...
CVE-2023-1197
Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...
CVE-2023-1197
CVE-2023-1197 is a Stored XSS vulnerability in uvdesk/community-skeleton prior to 1.1.0. Multiple sources describe the issue as a Stored XSS affecting the UVDesk Community Skeleton web app, with exploitation tied to storing and displaying unvalidated user input. The commonly cited remediation is ...
CVE-2023-1197 Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton
Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...
PT-2023-16813 · Unknown · Uvdesk Community Skeleton
Name of the Vulnerable Software and Affected Versions: uvdesk/community-skeleton versions prior to 1.1.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation or escaping, allowing...