TI-2023-02845 CVE-2023-3038 · GHSA-mmm9-vvx7-fjr6
HelpDezk Community improper authorization
Priority MEDIUM 50
SQL injection vulnerability in HelpDezk Community affecting version 1.1.10.
HelpDezk
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
HelpDezk records in CISA KEVNo HelpDezk vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2014-06856 CVE-2014-8337 · GHSA-3vx6-j7jc-h5p9
Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php…
Priority MEDIUM 50
Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension,…
TI-2023-02844 CVE-2023-3037 · GHSA-4h86-mvgc-529g
HelpDezk Community improper authorization
Priority MEDIUM 45
Improper authorization vulnerability in HelpDezk Community affecting version 1.1.10.
TI-2017-10305 CVE-2017-14145 · GHSA-xw89-p8ff-vmx3
HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via…
Priority MEDIUM 44
HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATH_INFO, related to the selectWarning function.
TI-2017-05098 CVE-2017-7447 · GHSA-jh37-gj29-248q
HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.
Priority MEDIUM 44
HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.
TI-2017-05097 CVE-2017-7446 · GHSA-7qqw-r4cr-36h5
HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.
Priority MEDIUM 44
HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.
TI-2017-10306 CVE-2017-14146 · GHSA-3rq4-xx94-7cf9
HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by…
Priority MEDIUM 41
HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the helpdezk\app\uploads\helpdezk\attachments\ directory.