CVE-2007-1012

DeskPRO 1.1.0 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in faq.php in DeskPRO 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the article parameter.

References (4)

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/32525

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/460200/100/0/threaded

[Third Party Advisory, VDB Entry] http://osvdb.org/33725

[Third Party Advisory] http://securityreason.com/securityalert/2267

Scores

EPSS 0.0033

EPSS Percentile 55.8%

Classification

CWE

CWE-79

Status draft

Affected Products (1)

deskpro/deskpro

Timeline

Published Feb 21, 2007

Tracked Since Feb 18, 2026