Unscored severity · published Dec 7, 2006
CVE-2006-6380
Cross-site scripting (XSS) vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary web script or HTML via the keyword parameter
–
CVSS
1.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UH
Ultimate Helpdesk · Ultimate Helpdesk
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6380
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6380
Vendor Advisory
http://secunia.com/advisories/23225
Exploit
http://www.securityfocus.com/bid/21402
www.vupen.com
http://www.vupen.com/english/advisories/2006/4819
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30723
www.exploit-db.com
https://www.exploit-db.com/exploits/2881
More from Ultimate Helpdesk
–
CVE-2006-6381
Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files via a