Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2015-4074
Disclosure Date: September 20, 2017 (last updated November 26, 2024)
Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a ticket.download_attachment task.
0
Attacker Value
Unknown
CVE-2015-4072
Disclosure Date: September 20, 2017 (last updated November 26, 2024)
Multiple cross-site scripting (XSS) vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via vectors related to name and message.
0
Attacker Value
Unknown
CVE-2015-4073
Disclosure Date: September 20, 2017 (last updated November 26, 2024)
Multiple SQL injection vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) ticket_code or (2) email parameter or (3) remote authenticated users to execute arbitrary SQL commands via the filter_order parameter.
0
Attacker Value
Unknown
CVE-2015-4075
Disclosure Date: September 20, 2017 (last updated November 26, 2024)
The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted language.save task.
0
Attacker Value
Unknown
CVE-2015-4071
Disclosure Date: August 18, 2017 (last updated November 26, 2024)
The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http://{target}/component/helpdeskpro/?view=ticket&id={ticketId}.
0
