Authentication flaw

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote...

CVE-2017-18486

Jitbit Helpdesk (before 9.0.3) is affected by an authentication flaw tied to mishandling of the User/AutoLogin userHash parameter. Tokens in a password-reset flow can be studied to reveal a weak PRNG-derived shared secret used for remote authentication, enabling an attacker to forge tokens for an...

CVE-2017-18486

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote...

PT-2019-8421

Name of the Vulnerable Software and Affected Versions Jitbit Helpdesk versions prior to 9.0.3 Description The issue allows remote attackers to escalate privileges due to mishandling of the userHash parameter in the User/AutoLogin functionality. By inspecting the token value provided in a password...

CVE-2017-18486: Insufficient Entropy in PRNG

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote...

CVE-2018-15640

Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...

CVE-2018-15640

Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...

Improper access control

Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...

CVE-2018-15640

Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...

CVE-2018-15640

CVE-2018-15640 concerns improper access control in the Helpdesk App of Odoo Enterprise 10.0–12.0 . The vulnerability allows remote authenticated attackers to obtain elevated privileges via a crafted request, as described in the CVE entry. Connected sources corroborate the affected software and th...

CVE-2018-15640

Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...

PT-2019-9150

Name of the Vulnerable Software and Affected Versions Odoo Enterprise versions 10.0 through 12.0 Description The issue is related to improper access control in the Helpdesk App, allowing remote authenticated attackers to gain elevated privileges by sending a crafted request. Recommendations For...

CVE-2018-15640: Improper Access Control

Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request...

SQL Injection Vulnerability in ad***.asp of Qixing Helpdesk System Backend

The Kairos Helpdesk System is a system for dealing with day-to-day issues. A SQL injection vulnerability exists in the backend ad.asp of Qixing Helpdesk System, which can be exploited by attackers to manipulate the database...

QNAP QTS Helpdesk Command Injection Vulnerability

QNAP QTS is a Turbo NAS operating system from QNAP Systems that provides file storage management, backup, multimedia applications and security monitoring. The system provides file storage, management, backup, multimedia applications and security monitoring, etc. Helpdesk is one of the helpdesk...

CVE-2018-0714

Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote attackers to run arbitrary commands in the compromised application...

CVE-2018-0714

Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote attackers to run arbitrary commands in the compromised application...

Command injection

Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote attackers to run arbitrary commands in the compromised application...

CVE-2018-0714

CVE-2018-0714 concerns a command-injection vulnerability in QNAP QTS Helpdesk (affecting Helpdesk 1.1.21 and earlier and listed affected builds: QTS 4.2.6 build 20180531, 4.3.3 build 20180528, 4.3.4 build 20180528 and earlier). The underlying issue allows remote attackers to execute arbitrary com...

CVE-2018-0714: Improper Neutralization of Special Elements used in a Command

Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote attackers to run arbitrary commands in the compromised application...