CVE-2017-7446

HelpDEZk 1.1.1 has CSRF in admin/home/person/ with an impact of obtaining admin privileges...

CVE-2017-7447

CVE-2017-7447 affects HelpDEZk 1.1.1, with CSRF in the admin path (admin/home#/logos/) that can lead to remote execution of arbitrary PHP code. The vulnerability is documented across multiple sources (NVD/NVD-linked records, CNVD, CVE listings, and exploitation records), and exploit references in...

CVE-2017-7447

HelpDEZk 1.1.1 has CSRF in admin/home/logos/ with an impact of remote execution of arbitrary PHP code...

CVE-2017-7446

HelpDEZk 1.1.1 has CSRF in admin/home/person/ with an impact of obtaining admin privileges...

CVE-2017-7446

HelpDEZk 1.1.1 is affected by a Cross-Site Request Forgery vulnerability in admin/home#/person/ that can lead to admin privileges. The CVE entry, confirmed across multiple sources, notes CSRF as the root cause in HelpDEZk’s web interface, with public exploit coverage (Exploit-DB, PacketStorm) ind...

HelpDEZK 1.1.1 CSRF / Code Execution

Exploit Title: Multiple CSRF Remote Code Execution Vulnerability on HelpDEZK 1.1.1 Date: 05-April-2017 Exploit Author: @runggareksya, @yokoacc, @AdyWikradinata, @dickysofficial, @dvnrcy Vendor Homepage: http://www.helpdezk.org/ Software Link: https://codeload.github.com/albandes/helpdezk/zip/v1.1...

CVE-2017-7447: Cross-Site Request Forgery (CSRF)

HelpDEZk 1.1.1 has CSRF in admin/home/logos/ with an impact of remote execution of arbitrary PHP code...

HelpDEZK 1.1.1 - Cross-Site Request Forgery Code Execution

HelpDEZK 1.1.1 - Cross-Site Request Forgery Code Execution Exploit Title: Multiple CSRF Remote Code Execution Vulnerability on HelpDEZK 1.1.1 Date: 05-April-2017 Exploit Author: @runggareksya, @yokoacc, @AdyWikradinata, @dickysofficial, @dvnrcy Vendor Homepage: http://www.helpdezk.org/ Software...

PT-2017-17743

Name of the Vulnerable Software and Affected Versions HelpDEZk version 1.1.1 Description The issue allows for remote execution of arbitrary PHP code through a CSRF vulnerability. It is specifically found in the "admin/home/logos/" endpoint. Recommendations For HelpDEZk version 1.1.1, as a tempora...

CVE-2017-7446: Cross-Site Request Forgery (CSRF)

HelpDEZk 1.1.1 has CSRF in admin/home/person/ with an impact of obtaining admin privileges...

PT-2017-17742

Name of the Vulnerable Software and Affected Versions HelpDEZk version 1.1.1 Description The issue allows for obtaining admin privileges through CSRF in the "admin/home/person/" endpoint. Recommendations For HelpDEZk version 1.1.1, update to a version that includes a fix for this issue, as using...

HelpDEZK 1.1.1 - Cross-Site Request Forgery / Code Execution

Exploit Title: Multiple CSRF Remote Code Execution Vulnerability on HelpDEZK 1.1.1 Date: 05-April-2017 Exploit Author: @runggareksya, @yokoacc, @AdyWikradinata, @dickysofficial, @dvnrcy Vendor Homepage: http://www.helpdezk.org/ Software Link: https://codeload.github.com/albandes/helpdezk/zip/v1.1...

HelpDEZk 1.0.1 File Upload

File upload vulnerability in HelpDEZk Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

HelpDezk 1.0.1 /app/modules/admin/views/upload.php 文件上传漏洞

No description provided by source...

[SECURITY] [DSA 3176-1] request-tracker4 security update

Exploit Title: HelpDezk 1.0.1 Multiple Vulnerabilities Google Dork: "intext: helpdezk-community-1.0.1" Date: 26-2-2015 Exploit Author: Dennis Veninga Vendor Homepage: http://www.helpdezk.org/ Vendor contacted: 26-2-2015 Version: 1.0.1 Tested on: Firefox 36 & Chrome 38 / W8.1-x64 HelpDezk - Versio...

HelpDezk 1.0.1 Multiple Vulnerabilities

Exploit Title: HelpDezk 1.0.1 Multiple Vulnerabilities Google Dork: "intext: helpdezk-community-1.0.1" Date: 26-2-2015 Exploit Author: Dennis Veninga Vendor Homepage: http://www.helpdezk.org/ Vendor contacted: 26-2-2015 Version: 1.0.1 Tested on: Firefox 36 & Chrome 38 / W8.1-x64 HelpDezk - Versio...

HelpDezk Multiple Vulnerabilities (Mar 2015)

HelpDezk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HelpDezk 1.0.1 Shell Upload / Code Execution / Disclosure Vulnerabilities

HelpDezk version 1.0.1 suffers from remote shell upload, code execution, and information disclosure vulnerabilities. Exploit Title: HelpDezk 1.0.1 Multiple Vulnerabilities Google Dork: "intext: helpdezk-community-1.0.1" Date: 26-2-2015 Exploit Author: Dennis Veninga Vendor Homepage:...

HelpDezk 1.0.1 Shell Upload / Code Execution / Disclosure

Exploit Title: HelpDezk 1.0.1 Multiple Vulnerabilities Google Dork: "intext: helpdezk-community-1.0.1" Date: 26-2-2015 Exploit Author: Dennis Veninga Vendor Homepage: http://www.helpdezk.org/ Vendor contacted: 26-2-2015 Version: 1.0.1 Tested on: Firefox 36 & Chrome 38 / W8.1-x64 HelpDezk - Versio...

Arbitrary File Upload in HelpDEZk

Advisory ID: HTB23239 Product: HelpDEZk Vendor: HelpDEZk Vulnerable Versions: 1.0.1 and probably prior Tested Version: 1.0.1 Advisory Publication: October 15, 2014 without technical details Vendor Notification: October 15, 2014 Public Disclosure: November 5, 2014 Vulnerability Type: Unrestricted...