Isupport@1.8 Security Vulnerabilities and Issues — Isupport@1.8 CVE List

Lucene search

IdevspotIsupport1.8

3 matches found

CVE•added 2006/09/19 9:7 p.m.•42 views

CVE-2006-4884

Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the ticket_id parameter in support/open_tickets.php, and (3) the cons_page_title parameter in index.php...

4.3CVSS5.9AI score0.00424EPSS

CVE•added 2007/12/27 11:46 p.m.•30 views

CVE-2007-6539

PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local files via the include_file parameter.

6.8CVSS6.6AI score0.00794EPSS

CVE•added 2012/10/08 8:55 p.m.•30 views

CVE-2012-5326

Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action.

6.8CVSS7.3AI score0.00211EPSS