Oneorzero Helpdesk
Approved changes feed: RSS · Atom
cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.4.2:*:*:*:*:*:*:*
part: a version: 1.6.4.2 update: *
| Vendor | Oneorzero (465125eb-b346-574e-bca0-e985a0e58f6a) |
|---|---|
| Product | Oneorzero Helpdesk (218c2cda-0d5c-51da-9b2b-8c5fc57666e5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-0886 |
vulnerable | 2026-06-08 04:51:11.896852 |
Details available
Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the default_language parameter.
Published: 2009-03-12T15:00:00.000Z
Updated: 2024-08-07T04:48:52.663Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5727 |
vulnerable | 2026-06-08 04:50:06.887406 |
Details available
Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, and possibly other versions, allows remote attackers to conduct cross-site scripting (XSS) attacks and inject arbitrary web script or HTML via XSS sequences without SCRIPT tags in the description parameter to (1) tcreate.php or (2) tupdate.php, as demonstrated using an onmouseover event in a b tag.
Published: 2007-10-30T21:00:00.000Z
Updated: 2024-08-07T15:39:13.699Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.