Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket is created by a support assistant, via the "id" parameter to the index.php script with the (3) tickettime, (4) ticketfiles, or (5) updateticketlog operations, or (6) via the update section when a ticket is edited.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MyHelpDesk HTML注入漏洞
Vulnerability Description
MyHelpDesk 20020509，可能还有其他版本存在跨站脚本漏洞。远程攻击者像其他用户一样借助(1) Title或者(2)当支持助理创建一个新ticket时的Description，借助带有(3)tickettime，(4)ticketfiles，或者(5)updateticketlog操作的index.php脚本的"id"参数或者(6)借助编辑ticket时的升级区域执行脚本。
CVSS Information
N/A
Vulnerability Type
N/A