Cromosoft

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cromosoft records in CISA KEV

No Cromosoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Facil Helpdesk 2 records LOW Simple Plantilla Php 2 records MEDIUM

Records

2 records in Facil Helpdesk · all components

TI-2009-04299 CVE-2009-4543 · GHSA-p257-45px-crmh

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil…

LOW 34

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01913 Published 2010-01-04 No fix listed CWE-94

TI-2009-04300 CVE-2009-4544 · GHSA-vcr3-8837-gf6x

Cross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies…

LOW 23

Cross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01553 Published 2010-01-04 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0