CVE-2006-6158

no score yetEPSS 3.0%

Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the (1) id or email parameter to ticketview.php, or (2) the email parameter to ticket.php.

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
Published: 2006-11-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ace_helpdesk:ace_helpdesk
inverseflow:help_desk
pmos_helpdesk:pmos_helpdesk

References

http://secunia.com/advisories/23052
http://secunia.com/advisories/23070
http://secunia.com/advisories/23071
http://securityreason.com/securityalert/1928
http://www.attrition.org/pipermail/vim/2006-November/001148.html

Check your stack JSON