TI-2020-09201 CVE-2020-11465 · GHSA-2j38-pmwm-2h3f
An issue was discovered in Deskpro before 2019.8.0.
Priority MEDIUM 42
An issue was discovered in Deskpro before 2019.8.0.
Deskpro
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Deskpro records in CISA KEVNo Deskpro vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
13 records
TI-2020-09203 CVE-2020-11467 · GHSA-mhpq-2ph4-jm64
An issue was discovered in Deskpro before 2019.8.0.
Priority LOW 38
An issue was discovered in Deskpro before 2019.8.0.
TI-2020-09199 CVE-2020-11463 · GHSA-2pp3-576m-vhmq
An issue was discovered in Deskpro before 2019.8.0.
Priority LOW 36
An issue was discovered in Deskpro before 2019.8.0.
TI-2021-14189 CVE-2021-35391 · GHSA-3r49-gcgv-9gw5
Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows…
Priority LOW 35
Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted URL.
TI-2006-05923 CVE-2006-6159 · GHSA-93cq-7ghw-gvgp
Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in DeskPRO 2.0.0 and…
Priority LOW 33
Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in DeskPRO 2.0.0 and 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) message or (2) subject parameter.
TI-2003-00804 CVE-2003-0874 · GHSA-vc76-xf92-jm9m
Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote…
Priority LOW 26
Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and conduct unauthorized activities via (1) the cat parameter in faq.php, (2) the article parameter in fa…
TI-2021-14840 CVE-2021-36696 · GHSA-q3gh-3g45-67qg
Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a…
Priority LOW 25
Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in social media links on a user profile due to lack of input validation.
TI-2021-14839 CVE-2021-36695 · GHSA-4778-fgpq-p5vc
Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a…
Priority LOW 25
Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in the download file feature on a manager profile due to lack of input validation.
TI-2020-17395 CVE-2020-28722 · GHSA-7fx5-qf68-qjx6
Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a…
Priority LOW 25
Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting (XSS) vulnerability that can lead to an account takeover via custom email templates.
TI-2007-01933 CVE-2007-2011 · GHSA-72wq-j3f9-x5wf
Cross-site scripting (XSS) vulnerability in login.php in DeskPro 2.0.1 allows remote…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in login.php in DeskPro 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
TI-2020-09202 CVE-2020-11466 · GHSA-r6x8-c338-2jr5
An issue was discovered in Deskpro before 2019.8.0.
Priority LOW 23
An issue was discovered in Deskpro before 2019.8.0.
TI-2020-09200 CVE-2020-11464 · GHSA-7952-m67q-5m97
An issue was discovered in Deskpro before 2019.8.0.
Priority LOW 22
An issue was discovered in Deskpro before 2019.8.0.
TI-2007-00980 CVE-2007-1012 · GHSA-3jm6-83wq-9j84
Cross-site scripting (XSS) vulnerability in faq.php in DeskPRO 1.1.0 allows remote…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in faq.php in DeskPRO 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the article parameter.