CVE-2018-10051

Name of the Vulnerable Software and Affected Versions: iScripts SupportDesk version 4.3

Description: The issue is related to a security problem where an attacker can inject malicious code. The problem occurs due to the lack of proper input validation in the txtinteligentsearch parameter of the staff/inteligentsearchresult.php endpoint.

Recommendations: For iScripts SupportDesk version 4.3, consider restricting access to the staff/inteligentsearchresult.php endpoint until a patch is available, and avoid using the txtinteligentsearch parameter in this endpoint to minimize the risk of exploitation.