Description
Cross-site scripting (XSS) vulnerability in default.asp in VanillaSoft Helpdesk 2005 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.
References
- http://pridels0.blogspot.com/2006/06/vanillasoft-helpdesk-xss-vuln.html
- 20544 third-party-advisory
- 1016254 vdb-entry
- 18368 vdb-entry
- ADV-2006-2247 vdb-entry
- vanillasoft-helpdesk-default-xss(27020) vdb-entry