Unscored severity · published Nov 28, 2006
CVE-2006-6158
Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote…
–
CVSS
3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the (1) id or email parameter to ticketview.php, or (2) the email parameter to ticket.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AH
Ace Helpdesk · Ace Helpdesk
2.3.1 · source: NVD
HD
Help Desk · Inverseflow
2.31 · source: NVD
PH
Pmos Helpdesk · Pmos Helpdesk
2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6158
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6158
Vendor Advisory
http://secunia.com/advisories/23052
Vendor Advisory
http://secunia.com/advisories/23070
secunia.com
http://secunia.com/advisories/23071
securityreason.com
http://securityreason.com/securityalert/1928
www.attrition.org
http://www.attrition.org/pipermail/vim/2006-November/001148.html
www.osvdb.org
http://www.osvdb.org/30667