medium4.3
CVE-2009-0303
Cross-site scripting (XSS) vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "…
Impact
Cross-site scripting (XSS) vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webhelpdesk | Web Help Desk | through 9.1.17 Versions 8.0.20, 8.0.21, 8.0.22, 8.2.0, 8.2.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/33651
- http://updates.webhelpdesk.com/weblog/updates/StableReleases/2009/01/23/911812309.html
- http://www.securityfocus.com/bid/33429
- http://secunia.com/advisories/33651
- http://updates.webhelpdesk.com/weblog/updates/StableReleases/2009/01/23/911812309.html
- http://www.securityfocus.com/bid/33429