Search vulnerabilities

Results 2

Export CSV
CVE-2006-6380

Cross-site scripting (XSS) vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
CVE-2006-6381

Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.

CVSS 2.0 · 7.5 High EPSS 2.8% KEV · Not listed