CVE-2009-4544 Cross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
MediumCVSS 4.3
EPSS 1.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cromosoft facil helpdesk | = 2.3 | No fix listed |
References
- 36209 third-party-advisory vendor-advisory
- 9396 exploit
- facilhelpdesk-kbase-xss(52361) vdb-entry