GCVE - cpe:2.3:a:helpdezk:helpdezk:1.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:helpdezk:helpdezk:1.1.1:*:*:*:*:*:*:*

part: a version: 1.1.1 update: *

Vendor	Helpdezk (`53aac5e5-d063-52d4-af02-819e3e63d7a8`)
Product	Helpdezk (`9f629d21-218f-5ae9-ac56-247aad6070ef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/albandes/helpdezk`	purl2cpe	2026-06-01 10:12:27.970600
`pkg:sourceforge/helpdezk`	purl2cpe	2026-06-01 10:12:27.970601

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7447`	vulnerable	2026-06-08 05:09:55.978525	Details available HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code. Published: 2017-04-05T22:00:00.000Z Updated: 2024-08-05T16:04:11.394Z Open on db.gcve.eu Reference links https://github.com/albandes/helpdezk/issues/2 https://www.exploit-db.com/exploits/41824/ http://www.securityfocus.com/bid/97485 http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7446`	vulnerable	2026-06-08 05:09:55.978078	Details available HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges. Published: 2017-04-05T22:00:00.000Z Updated: 2024-08-05T16:04:11.581Z Open on db.gcve.eu Reference links https://github.com/albandes/helpdezk/issues/2 http://www.securityfocus.com/bid/97484 https://www.exploit-db.com/exploits/41824/ http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14146`	vulnerable	2026-06-08 05:08:49.388407	Details available HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the helpdezk\app\uploads\helpdezk\attachments\ directory. Published: 2017-09-05T07:00:00.000Z Updated: 2024-09-16T18:23:41.191Z Open on db.gcve.eu Reference links https://github.com/M4ple/vulnerability/blob/master/helpdezk_file_upload/helpdezk_file_upload.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14145`	vulnerable	2026-06-08 05:08:49.388026	Details available HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATH_INFO, related to the selectWarning function. Published: 2017-09-05T07:00:00.000Z Updated: 2024-09-16T19:31:30.508Z Open on db.gcve.eu Reference links https://github.com/M4ple/vulnerability/blob/master/helpdezk_sql/helpdezk_sql_injection.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.