CVEvulnerability
CVE-2007-2524
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-05-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, but the proper identifier for the ipsec-tools issue is CVE-2007-1841.
Affected configurations
• otrs otrs 2.0.4
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/35821 osvdb.org
- http://osvdb.org/35822 osvdb.org
- http://secunia.com/advisories/25205 Vendor Advisory
- http://secunia.com/advisories/25419 Vendor Advisory
- http://secunia.com/advisories/25787 Vendor Advisory
- http://securityreason.com/securityalert/2668 securityreason.com
- http://www.debian.org/security/2007/dsa-1298 www.debian.org
- http://www.novell.com/linux/security/advisories/2007_13_sr.html www.novell.com
- http://www.securityfocus.com/archive/1/467870/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/471192/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23862 Exploit
- http://www.virtuax.be/?page=library&id=35&type=Exploits Exploit, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/1698 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34164 exchange.xforce.ibmcloud.com
- http://osvdb.org/35821 osvdb.org
- http://osvdb.org/35822 osvdb.org
- http://secunia.com/advisories/25205 Vendor Advisory
- http://secunia.com/advisories/25419 Vendor Advisory
- http://secunia.com/advisories/25787 Vendor Advisory
- http://securityreason.com/securityalert/2668 securityreason.com
- http://www.debian.org/security/2007/dsa-1298 www.debian.org
- http://www.novell.com/linux/security/advisories/2007_13_sr.html www.novell.com
- http://www.securityfocus.com/archive/1/467870/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/471192/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23862 Exploit
- http://www.virtuax.be/?page=library&id=35&type=Exploits Exploit, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/1698 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34164 exchange.xforce.ibmcloud.com