CVE

Id
22262  
CVE No.
CVE-2006-6158  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the (1) id or email parameter to ticketview.php, or (2) the email parameter to ticket.php.  
Phase
Assigned (20061128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
215084 22262 CVE-2006-6158 BUGTRAQ:20061122 XSS in scriptat support InverseFlow Help Desk v2.31  View
215085 22262 CVE-2006-6158 URL:http://www.securityfocus.com/archive/1/archive/1/452397/100/0/threaded  View
215086 22262 CVE-2006-6158 VIM:20061128 PMOS Help Desk/etc. SQL injection - source verify and more info  View
215087 22262 CVE-2006-6158 URL:http://www.attrition.org/pipermail/vim/2006-November/001148.html  View
215088 22262 CVE-2006-6158 BID:21250  View
215089 22262 CVE-2006-6158 URL:http://www.securityfocus.com/bid/21250  View
215090 22262 CVE-2006-6158 VUPEN:ADV-2006-4670  View
215091 22262 CVE-2006-6158 URL:http://www.vupen.com/english/advisories/2006/4670  View
215092 22262 CVE-2006-6158 VUPEN:ADV-2006-4671  View
215093 22262 CVE-2006-6158 URL:http://www.vupen.com/english/advisories/2006/4671  View
215094 22262 CVE-2006-6158 VUPEN:ADV-2006-4672  View
215095 22262 CVE-2006-6158 URL:http://www.vupen.com/english/advisories/2006/4672  View
215096 22262 CVE-2006-6158 OSVDB:30667  View
215097 22262 CVE-2006-6158 URL:http://www.osvdb.org/30667  View
215098 22262 CVE-2006-6158 OSVDB:34034  View
215099 22262 CVE-2006-6158 URL:http://www.osvdb.org/34034  View
215100 22262 CVE-2006-6158 SECUNIA:23052  View
215101 22262 CVE-2006-6158 URL:http://secunia.com/advisories/23052  View
215102 22262 CVE-2006-6158 SECUNIA:23070  View
215103 22262 CVE-2006-6158 URL:http://secunia.com/advisories/23070  View
215104 22262 CVE-2006-6158 SECUNIA:23071  View
215105 22262 CVE-2006-6158 URL:http://secunia.com/advisories/23071  View
215106 22262 CVE-2006-6158 SREASON:1928  View
215107 22262 CVE-2006-6158 URL:http://securityreason.com/securityalert/1928  View
215108 22262 CVE-2006-6158 XF:pmoshelpdesk-ticketview-xss(30489)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59368 JVNDB-2006-001634 Doug Luxem Liberum Help Desk の details.asp における SQL インジェクションの脆弱性 Doug Luxem Liberum Help Desk の details.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-6160 22262 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001634.html  View