Description
Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in DeskPRO 2.0.0 and 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) message or (2) subject parameter.
References
- deskpro-newticket-xss(30520) vdb-entry
- 21248 vdb-entry
- http://www.zion-security.com/text/Mul_Vulnerability_DeskPro.txt
- 22991 third-party-advisory
- ADV-2006-4676 vdb-entry
- 30671 vdb-entry