Approved changes feed: RSS · Atom

cpe:2.3:a:cromosoft:facil_helpdesk:2.3:*:*:*:*:*:*:*

part: a version: 2.3 update: *

VendorCromosoft (74dfe1f2-8675-5b63-bde9-c07cd079f584)
ProductFacil Helpdesk (59e6bcb5-78d4-559d-9aa7-80275b50b84d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4544 vulnerable 2026-06-08 04:51:48.865018 Details available
Cross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Published: 2010-01-04T17:00:00.000Z
Updated: 2024-08-07T07:08:37.950Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4543 vulnerable 2026-06-08 04:51:48.864504 Details available
PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.
Published: 2010-01-04T17:00:00.000Z
Updated: 2024-08-07T07:08:38.375Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.