CVE-2018-10051

CVE-2018-10051 affects iScripts SupportDesk v4.3. The vulnerability is a cross-site scripting (XSS) flaw exploited via the staff/inteligentsearchresult.php txtinteligentsearch parameter. NVD notes an overall CVSS v3.0 base score of 5.4 (MEDIUM) with network attack vector, low attack complexity, r...

CVE-2018-10052

The affected software is iScripts SupportDesk v4.3. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the admin/inteligentsearchresult.php txtinteligentsearch parameter. Root cause (as stated in connected documents) is improper input handling in that parameter leading to scri...