Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
deskpro vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2007-1012
Cross-site scripting (XSS) vulnerability in faq.php in DeskPRO 1.1.0 allows remote malicious users to inject arbitrary web script or HTML via the article parameter.
Deskpro Deskpro 1.1.0
7.2
CVSSv3
CVE-2021-35391
Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows malicious users to execute arbitrary code via a crafted URL.
Deskpro Deskpro 2021.21.6
NA
CVE-2003-0874
Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and previous versions allow remote malicious users to insert arbitrary SQL and conduct unauthorized activities via (1) the cat parameter in faq.php, (2) the article parameter in faq.php, (3) the tickedid parameter in view.ph...
Deskpro Deskpro 1.1 .0
NA
CVE-2006-7000
Headstart Solutions DeskPRO allows remote malicious users to obtain the full path via direct requests to (1) email/mail.php, (2) includes/init.php, (3) certain files in includes/cron/, and (4) jpgraph.php, (5) jpgraph_bar.php, (6) jpgraph_pie.php, and (7) jpgraph_pie3d.php in inc...
Headstart Solutions Deskpro 2.0.0
Headstart Solutions Deskpro 2.0.1
NA
CVE-2006-6998
install/loader_help.php in Headstart Solutions DeskPRO allows remote malicious users to obtain configuration information via a q=phpinfo QUERY_STRING, which calls the phpinfo function.
Headstart Solutions Deskpro 2.0.0
Headstart Solutions Deskpro 2.0.1
NA
CVE-2006-6999
attachment.php in Headstart Solutions DeskPRO allows remote malicious users to read all uploaded files by providing the file number in a modified id parameter.
Headstart Solutions Deskpro 2.0.0
Headstart Solutions Deskpro 2.0.1
NA
CVE-2006-6973
Headstart Solutions DeskPRO does not require authentication for certain files and directories associated with administrative activities, which allows remote malicious users to (1) reinstall the application via a direct request for install/index.php; (2) delete the database via a ...
Headstart Solutions Deskpro
NA
CVE-2006-6974
Headstart Solutions DeskPRO stores sensitive information under the web root with insufficient access control, which allows remote malicious users to (1) list files in the includes/ directory; obtain the SQL username and password via a direct request for (2) config.php and (3) con...
Headstart Solutions Deskpro
NA
CVE-2007-4412
Multiple cross-site scripting (XSS) vulnerabilities in Headstart Solutions DeskPRO 3.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to (1) techs.php, (2) ticket_category.php, (3) ticket_priority.php, (4) ticket_workflow.php,...
Headstart Solutions Deskpro 3.0.2
NA
CVE-2007-4413
Direct static code injection vulnerability in admincp/user_help.php in Headstart Solutions DeskPRO 3.0.2 allows remote authenticated users to inject arbitrary PHP code into an unspecified file via a new_entry value in the do parameter.
Headstart Solutions Deskpro 3.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
deserialization
CVE-2024-4040
cross-site scripting
CVE-2023-25790
CVE-2024-2961
XML external entity
CVE-2024-26926
CVE-2024-32806
CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »