Vulnerabilities

TI-2007-06247 CVE-2007-6550 · GHSA-jx5h-g783-88p7

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does…

MEDIUM 43

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array param…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0684 Published 2007-12-28 No fix listed CWE-94

TI-2006-05922 CVE-2006-6158 · GHSA-43xr-mj98-366j

Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly…

LOW 36

Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03044 Published 2006-11-28 No fix listed

Vulnerabilities

Filters

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does…

Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly…