Unscored CVE-2009-4861 EUVD-2009-4824GHSA-7r4p-87q8-54cf

Cross-site scripting (XSS) vulnerability in shownews.php in SupportPRO SupportDesk 3.0 allows remote attackers to inject arbitrary web scri…

Published May 10, 2010 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in shownews.php in SupportPRO SupportDesk 3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

References

http://packetstormsecurity.org/0908-exploits/supportpro-xss.txt
36242 third-party-advisory