CVE-2015-4074

2017-09-2016:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.5%

JSON

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a … (dot dot) in the filename parameter in a ticket.download_attachment task.

References

packetstormsecurity.com/files/132766/Joomla-Helpdesk-Pro-XSS-File-Disclosure-SQL-Injection.html

seclists.org/fulldisclosure/2015/Jul/102

www.securityfocus.com/bid/75971

www.exploit-db.com/exploits/37666/