CVE-2009-4433

CVE-2009-4433 affects IDevSpot iSupport 1.8 and earlier. The XSS flaws enable remote injection via: (a) the 5 or (b) 9 field in post to ticket_function.php, reachable via ticket_submit.php and index.php; (c) the which parameter to function.php; or (d) the which parameter to index.php, related to ...

CVE-2006-4884

CVE-2006-4884 concerns multiple XSS vulnerabilities in IDevSpot iSupport 1.8. The issue enables remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the ticket_id parameter in support/open_tickets.php, and (3) the cons_page_title paramet...

CVE-2009-4434

CVE-2009-4434 affects IDevSpot iSupport 1.8 and earlier. A directory traversal flaw in index.php allows remote attackers to read arbitrary files via .. in the include_file parameter. NVD lists CVSSv2 base score 5.0 (Medium), network vector, low attack complexity, no authentication, partial confid...

CVE-2012-5326

CVE-2012-5326 affects IDevSpot iSupport 1.x. The vulnerability is a CSRF in admin/function.php that allows remote attackers to hijack administrator authentication to perform actions that add administrator accounts. The connected documents provide the same description and do not specify exploitati...

CVE-2005-4616

CVE-2005-4616 concerns an SQL injection in index.php of iSupport 1.06 via the include_file parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, impacting confidentiality, integrity, and availability (as per the provided CVSS metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P, ...

CVE-2007-6539

The CVE-2007-6539 entry concerns a PHP local file inclusion in the IDevspot iSupport 1.8 product. The vulnerability arises from index.php’s include_file parameter, enabling remote attackers to include local files. Documented impact is partial confidentiality, integrity, and availability, with a C...