CVEvulnerability
CVE-2006-6159
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-11-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in DeskPRO 2.0.0 and 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) message or (2) subject parameter.
Affected configurations
• deskpro deskpro 2.0.0
• deskpro deskpro 2.0.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/22991 Vendor Advisory
- http://www.osvdb.org/30671 www.osvdb.org
- http://www.securityfocus.com/bid/21248 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4676 Vendor Advisory
- http://www.zion-security.com/text/Mul_Vulnerability_DeskPro.txt www.zion-security.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30520 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/22991 Vendor Advisory
- http://www.osvdb.org/30671 www.osvdb.org
- http://www.securityfocus.com/bid/21248 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4676 Vendor Advisory
- http://www.zion-security.com/text/Mul_Vulnerability_DeskPro.txt www.zion-security.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30520 exchange.xforce.ibmcloud.com