Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Astrotalks Clear all filters
TI-2023-30218 CVE-2023-53935 · GHSA-97c9-gh8x-2vv2

WBiz Desk 1.2 SQL Injection Vulnerability via ticket.php Parameter

Priority LOW 23

WBiz Desk 1.2 contains a SQL injection vulnerability that allows non-admin users to manipulate database queries through the 'tk' parameter in ticket.php.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00213 Published 2025-12-18 No fix listed CWE-89
TI-2024-05136 CVE-2024-5525 · GHSA-gggr-w4c4-8w8h

Improper privilege management in Astrotalks

Priority MEDIUM 40

Improper privilege management vulnerability in Astrotalks affecting version 10/03/2023.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00354 Published 2024-05-31 No fix listed CWE-269
TI-2024-05135 CVE-2024-5524 · GHSA-mfv3-73vg-4vjg

Information disclosure in Astrotalks

Priority LOW 30

Information exposure vulnerability in Astrotalks affecting version 10/03/2023.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00309 Published 2024-05-31 No fix listed CWE-200
TI-2024-05134 CVE-2024-5523 · GHSA-pwh7-phvx-rxgv

SQL injection in Astrotalks

Priority MEDIUM 40

SQL injection vulnerability in Astrotalks affecting version 10/03/2023.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00374 Published 2024-05-31 No fix listed CWE-89