Helpdesk Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:helpdesk_pro_project:helpdesk_pro:*:*:*:*:*:joomla\!:*:*part: a version: * update: *
| Vendor | Helpdesk Pro Project (d77c9b30-e248-5b35-8e65-b8c08b1f5651) |
|---|---|
| Product | Helpdesk Pro (b1dcd27a-e756-5cba-b08f-838da83295bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | joomla! |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-4074 |
vulnerable | 2026-06-08 05:06:39.147913 |
Details available
Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a ticket.download_attachment task.
Published: 2017-09-20T16:00:00.000Z
Updated: 2024-08-06T06:04:02.576Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4073 |
vulnerable | 2026-06-08 05:06:39.147590 |
Details available
Multiple SQL injection vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) ticket_code or (2) email parameter or (3) remote authenticated users to execute arbitrary SQL commands via the filter_order parameter.
Published: 2017-09-20T16:00:00.000Z
Updated: 2024-08-06T06:04:02.809Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4072 |
vulnerable | 2026-06-08 05:06:39.147227 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via vectors related to name and message.
Published: 2017-09-20T16:00:00.000Z
Updated: 2024-08-06T06:04:02.613Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4071 |
vulnerable | 2026-06-08 05:06:39.146802 |
Details available
The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http://{target}/component/helpdeskpro/?view=ticket&id={ticketId}.
Published: 2017-08-18T18:00:00.000Z
Updated: 2024-08-06T06:04:02.615Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.