CVE-2005-3839 Cross-site scripting (XSS) vulnerability in SupportPRO Supportdesk allows remote attackers to inject arbitrary web script or HTML via the (1) post tickers and (2) view tickets options.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in SupportPRO Supportdesk allows remote attackers to inject arbitrary web script or HTML via the (1) post tickers and (2) view tickets options.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| supportpro supportdesk | All versions | No fix listed |
References
- pridels0.blogspot.com
- 17701 third-party-advisory
- 21088 vdb-entry
- 15564 vdb-entry
- ADV-2005-2574 vdb-entry