CVE

Id
5319  
CVE No.
CVE-2002-0931  
Status
Candidate  
Description
Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket is created by a support assistant, via the "id" parameter to the index.php script with the (3) tickettime, (4) ticketfiles, or (5) updateticketlog operations, or (6) via the update section when a ticket is edited.  
Phase
Proposed (20020830)  
Votes
ACCEPT(2) Cole, Frech | NOOP(2) Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28529 5319 CVE-2002-0931 BUGTRAQ:20020610 [ARL02-A15] Multiple Security Issues in MyHelpdesk  View
28530 5319 CVE-2002-0931 URL:http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html  View
28531 5319 CVE-2002-0931 BID:4967  View
28532 5319 CVE-2002-0931 URL:http://www.securityfocus.com/bid/4967  View
28533 5319 CVE-2002-0931 BID:4970  View
28534 5319 CVE-2002-0931 URL:http://www.securityfocus.com/bid/4970  View
28535 5319 CVE-2002-0931 XF:myhelpdesk-new-ticket-xss(9319)  View
28536 5319 CVE-2002-0931 URL:http://www.iss.net/security_center/static/9319.php  View
28537 5319 CVE-2002-0931 XF:myhelpdesk-index-php-xss(9320)  View

Related JVN