NVD

Id
51556  
Name
CVE-2009-4433  
Description
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (a) 5 or (b) 9 field in a post action to ticket_function.php, reachable through ticket_submit.php and index.php; (c) the which parameter to function.php, or (d) the which parameter to index.php, related to knowledgebase_list.php. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-12-28  
Modified Date
2010-06-29  
Seq
2009-4433  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261401 51556 CVE-2009-4433 http://packetstormsecurity.org/0912-exploits/isupport-lfixss.txt  View
261402 51556 CVE-2009-4433 10478  View
261403 51556 CVE-2009-4433 37380  View
261404 51556 CVE-2009-4433 isupport-ticketfunction-xss(54858)  View
261405 51556 CVE-2009-4433 isupport-index-function-xss(54859)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44230 JVNDB-2009-005237 IDevSpot iSupport におけるクロスサイトスクリプティングの脆弱性 IDevSpot iSupport には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4433 41864 CVE-2009-4433 51556 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005237.html 2009-12-28 2012-09-25 View