Vulnerabilities

TI-2009-04300 CVE-2009-4544 · GHSA-vcr3-8837-gf6x

Cross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies…

LOW 23

Cross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01553 Published 2010-01-04 No fix listed CWE-79

TI-2009-04299 CVE-2009-4543 · GHSA-p257-45px-crmh

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil…

LOW 34

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01913 Published 2010-01-04 No fix listed CWE-94

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies…

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil…