CVE-2006-6733
Cross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1 (osTicket) allows remote attackers to inject arbitrary web script or HTML via the e parameter.
- Affected products
- Osticket
- Osticket Osticket Sts
- = 1.2.7, 1.3_beta
- Fix
- Available
- CVSS 2.0
- 4.3 MEDIUM
- EPSS
- 1.5% (73th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2006-12-26
CVE-2006-6733 at NVD
1 known exploit for CVE-2006-6733
Proof-of-concept code and exploit modules indexed by Sploitus