Vulnerabilities

TI-2014-08299 CVE-2014-100035 · GHSA-c7f2-5336-87pq

SQL injection vulnerability in the ticket grid in the admin interface in LicensePal…

LOW 35

SQL injection vulnerability in the ticket grid in the admin interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01178 Published 2015-01-13 No fix listed CWE-89

TI-2014-08298 CVE-2014-100034 · GHSA-qf8c-jp5x-ph4f

Cross-site scripting (XSS) vulnerability in the frontend interface in LicensePal…

LOW 22

Cross-site scripting (XSS) vulnerability in the frontend interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2015-01-13 No fix listed CWE-79

TI-2014-08297 CVE-2014-100033 · GHSA-r2f5-rm2p-v542

Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote…

LOW 27

Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote attackers to read arbitrary files via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01854 Published 2015-01-13 No fix listed CWE-22

Vulnerabilities

Filters

SQL injection vulnerability in the ticket grid in the admin interface in LicensePal…

Cross-site scripting (XSS) vulnerability in the frontend interface in LicensePal…

Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote…