1224 matches found
CVE-2024-45709 SolarWinds Web Help Desk Local File Read Vulnerability
SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited...
CVE-2024-45709
CVE-2024-45709 affects SolarWinds Web Help Desk. The vulnerability is a local file read flaw that requires the product to be installed on Linux and configured to use a non-default development/test mode, which limits exposure. The available sources do not specify affected versions (beyond the Linu...
CVE-2024-45709 SolarWinds Web Help Desk Local File Read Vulnerability
SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited...
SolarWinds Web Help Desk 路径遍历漏洞
SolarWinds Web Help Desk is a suite of help desk and asset management software from US-based SolarWinds. The software supports centralized knowledge base, IT asset management, project and task management, and other features. SolarWinds Web Help Desk suffers from a path traversal vulnerability tha...
CVE-2024-51910
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ezlab Assist24 Help Desk assist24it allows DOM-Based XSS.This issue affects Assist24 Help Desk: from n/a through = 20150401.2...
CVE-2024-51910 WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mauro Cordioli Assist24 Help Desk allows DOM-Based XSS.This issue affects Assist24 Help Desk: from n/a through 20150401.2...
CVE-2024-51910
CVE-2024-51910 is a DOM-based XSS in Mauro Cordioli’s Assist24 Help Desk WordPress plugin (vulnerable through 20150401.2). Root cause: improper input neutralization during web page generation. Affected software: Assist24 Help Desk (WordPress plugin). Impact: Cross-site scripting via crafted input...
CVE-2024-51910 WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ezlab Assist24 Help Desk assist24it allows DOM-Based XSS.This issue affects Assist24 Help Desk: from n/a through = 20150401.2...
PT-2024-35043 · Mauro Cordioli · Assist24 Help Desk
Name of the Vulnerable Software and Affected Versions: Mauro Cordioli Assist24 Help Desk versions from n/a through 20150401.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks...
WordPress plugin Assist24 Help Desk 跨站脚本漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin...
CVE-2024-52370
Unrestricted Upload of File with Dangerous Type vulnerability in Hive Support Hive Support hive-support allows Upload a Web Shell to a Web Server.This issue affects Hive Support: from n/a through = 1.1.1...
CVE-2024-52370
CVE-2024-52370 concerns the WordPress plugin “Hive Support – WordPress Help Desk.” The vulnerability is described as Unrestricted Upload of File with Dangerous Type, enabling an attacker to upload a web shell to the web server. Affected versions are Hive Support – WordPress Help Desk up to 1.1.1....
PT-2024-35207 · WordPress · Hive Support – Wordpress Help Desk
Name of the Vulnerable Software and Affected Versions: Hive Support – WordPress Help Desk versions 1.1.1 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, potentially enabling an attacker to upload a web shell to a web server. This could grant an...
WordPress Hive Support – WordPress Help Desk Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload
Software Hive Support – WordPress Help Desk Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52370 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 6b874f7d4e45 Credits stealthcopter Requir...
CVE-2024-51670
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...
CVE-2024-51670
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Stored XSS.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.7...
CVE-2024-51670
CVE-2024-51670 – JS Help Desk WordPress Plugin : Affected plugin versions are
CVE-2024-51670 WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...
CVE-2024-51670 WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...
PT-2024-34815
Name of the Vulnerable Software and Affected Versions JS Help Desk – Best Help Desk & Support Plugin versions n/a through 2.8.7 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, whic...