CVE-2013-7191

CVE-2013-7191 has a documented XSS vulnerability in Tenmiles Helpdesk Pilot. The issue arises when an attacker can inject arbitrary web script or HTML via the PATH_INFO to the default URI for a ticket. The available sources (NVD, CVE records) confirm the vulnerability and describe the impact as e...