CVE-2009-1261

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-04-07 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in Web Help Desk 9.1.22 (evaluation version) allow remote attackers to inject arbitrary web script or HTML via the (1) Report Name, (2) Asset No., and (3) Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Webhelpdesk Web Help Desk: 9.1.22

References

http://osvdb.org/53422
http://osvdb.org/53423
http://osvdb.org/53424
http://secunia.com/advisories/34596
http://www.securityfocus.com/bid/34391
https://exchange.xforce.ibmcloud.com/vulnerabilities/49683
http://osvdb.org/53422
http://osvdb.org/53423
http://osvdb.org/53424
http://secunia.com/advisories/34596
http://www.securityfocus.com/bid/34391
https://exchange.xforce.ibmcloud.com/vulnerabilities/49683

Get alerted when CVE-2009-1261 or the next vulnerability affects your stack