Essandre

**Name of the Vulnerable Software and Affected Versions** IDevSpot iSupport versions 1.8 and earlier **Description** The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting (XSS) attacks. This can be achieved through various means, including the "5" or "9" field in a post action to "ticket function.php", the "which" parameter to "function.php", or the "which" parameter to "index.php". These endpoints are reachable through "ticket submit.php" and "index.php", and are related to "knowledgebase list.php". **Recommendations** For IDevSpot iSupport versions 1.8 and earlier, consider disabling access to the vulnerable endpoints, such as "ticket function.php", "function.php", and "index.php", until a fix is available. Additionally, restrict the use of the "which" parameter and the "5" and "9" fields in post actions to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** iSupport versions 1.8 and earlier **Description** A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the `include file` parameter. **Recommendations** For versions 1.8 and earlier, restrict access to the `include file` parameter in the index.php file to minimize the risk of exploitation. Consider implementing input validation to prevent directory traversal attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.