Vulnerabilities

TI-2012-04500 CVE-2012-5326 · GHSA-9rpg-fg7x-wg5h

Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot…

LOW 32

Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an ad…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00953 Published 2012-10-08 No fix listed CWE-352

TI-2009-04197 CVE-2009-4434 · GHSA-v3w7-82hc-2c6w

Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier…

LOW 28

Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02744 Published 2009-12-28 No fix listed CWE-22

TI-2009-04196 CVE-2009-4433 · GHSA-gq23-92w8-fwwg

Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (a) 5 or (b) 9 field in a post action to ticket_function.php,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0224 Published 2009-12-28 No fix listed CWE-79

TI-2007-06236 CVE-2007-6539 · GHSA-3gqr-fc98-chwr

PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows…

LOW 34

PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local files via the include_file parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0213 Published 2007-12-27 No fix listed CWE-94

TI-2006-04711 CVE-2006-4884 · GHSA-jm9v-v5gg-hc8x

Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the ticket_id parameter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03029 Published 2006-09-19 No fix listed

TI-2005-04347 CVE-2005-4616 · GHSA-gvpj-hm4g-j324

SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to…

LOW 36

SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the include_file parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01316 Published 2006-01-04 No fix listed