Vulnerabilities > Webhelpdesk

DATE CVE VULNERABILITY TITLE RISK
2009-04-07 CVE-2009-1261 Cross-Site Scripting vulnerability in Webhelpdesk web Help Desk 9.1.22
Multiple cross-site scripting (XSS) vulnerabilities in Web Help Desk 9.1.22 (evaluation version) allow remote attackers to inject arbitrary web script or HTML via the (1) Report Name, (2) Asset No., and (3) Full Name fields in a Models action.
4.3
2009-01-27 CVE-2009-0303 Cross-Site Scripting vulnerability in Webhelpdesk web Help Desk
Cross-site scripting (XSS) vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa.
4.3