gregor mynarsky vulnerabilities and exploits

(subscribe to this query)

The Helpdesk Pro Plugin prior to 1.4.0 for Joomla! allows remote malicious users to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http://{target}/component/helpdeskpro/?view=ticket&id={ticketId}.

Helpdesk Pro Project Helpdesk Pro

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in the Helpdesk Pro plugin prior to 1.4.0 for Joomla! allow remote malicious users to inject arbitrary web script or HTML via vectors related to name and message.

Helpdesk Pro Project Helpdesk Pro

1 EDB exploit

Multiple SQL injection vulnerabilities in the Helpdesk Pro plugin prior to 1.4.0 for Joomla! allow remote malicious users to execute arbitrary SQL commands via the (1) ticket_code or (2) email parameter or (3) remote authenticated users to execute arbitrary SQL commands via the f...

Helpdesk Pro Project Helpdesk Pro

1 EDB exploit

Directory traversal vulnerability in the Helpdesk Pro plugin prior to 1.4.0 for Joomla! allows remote malicious users to read arbitrary files via a .. (dot dot) in the filename parameter in a ticket.download_attachment task.

Helpdesk Pro Project Helpdesk Pro

1 EDB exploit

The Helpdesk Pro plugin prior to 1.4.0 for Joomla! allows remote malicious users to write to arbitrary .ini files via a crafted language.save task.

Helpdeskpro Helpdesk Pro

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook