Oneorzero Helpdesk
Approved changes feed: RSS · Atom
cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6:*:*:*:*:*:*:*
part: a version: 1.6 update: *
| Vendor | Oneorzero (465125eb-b346-574e-bca0-e985a0e58f6a) |
|---|---|
| Product | Oneorzero Helpdesk (218c2cda-0d5c-51da-9b2b-8c5fc57666e5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-0886 |
vulnerable | 2026-06-08 04:51:11.893928 |
Details available
Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the default_language parameter.
Published: 2009-03-12T15:00:00.000Z
Updated: 2024-08-07T04:48:52.663Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5474 |
vulnerable | 2026-06-08 04:49:20.607204 |
Details available
The "forgot password" function in OneOrZero Helpdesk before 1.6.5.4 generates insecure passwords by concatenating the current timestamp with the username, which allows remote attackers to gain access as an arbitrary user by requesting a password reset.
Published: 2006-10-24T20:00:00.000Z
Updated: 2024-08-07T19:48:30.530Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.