Show filters
13 Total Results
Displaying 11-13 of 13
Sort by:
Attacker Value
Unknown

CVE-2019-16956

Disclosure Date: January 04, 2021 (last updated February 22, 2025)
SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket.
Attacker Value
Unknown

CVE-2009-1261

Disclosure Date: April 07, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Web Help Desk 9.1.22 (evaluation version) allow remote attackers to inject arbitrary web script or HTML via the (1) Report Name, (2) Asset No., and (3) Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown

CVE-2009-0303

Disclosure Date: January 27, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa.
0