CVE-2010-2080

Description

Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/61868

http://www.securityfocus.com/bid/43264

http://security-tracker.debian.org/tracker/CVE-2010-2080

http://secunia.com/advisories/41381

http://otrs.org/advisory/OSA-2010-02-en/

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3