Unscored severity · published Nov 26, 2005
CVE-2005-3839
Cross-site scripting (XSS) vulnerability in SupportPRO Supportdesk allows remote attackers to inject arbitrary web script or HTML via the (1) post tickers and (2) view tickets…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in SupportPRO Supportdesk allows remote attackers to inject arbitrary web script or HTML via the (1) post tickers and (2) view tickets options.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SU
Supportdesk · Supportpro
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3839
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3839
pridels0.blogspot.com
http://pridels0.blogspot.com/2005/11/supportpro-supportdesk-xss-vuln.html
secunia.com
http://secunia.com/advisories/17701
www.osvdb.org
http://www.osvdb.org/21088
www.securityfocus.com
http://www.securityfocus.com/bid/15564
www.vupen.com
http://www.vupen.com/english/advisories/2005/2574
More from Supportdesk
–
CVE-2009-4861
Cross-site scripting (XSS) vulnerability in shownews.php in SupportPRO SupportDesk 3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO