helpdeskz-file-upload-poc

HelpDeskZ File Upload RCE An unauthenticated arbitrary fil...

CVE-2022-31398

A cross-site scripting XSS vulnerability in /staff/tools/custom-fields of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field...

CVE-2022-31400

A cross-site scripting XSS vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field...

EUVD-2020-19091

Malware in sbrugna...

EUVD-2025-5307

Malicious code in bioql PyPI...

EUVD-2024-27043

Malicious code in bioql PyPI...

EUVD-2022-52909

Malicious code in bioql PyPI...

EUVD-2022-52910

Malicious code in bioql PyPI...

CVE-2024-46639

A cross-site scripting XSS vulnerability in HelpDeskZ v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field of Custom Fields message box...

CVE-2024-46226

A stored cross site scripting XSS vulnerability in HelpDeskZ v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket...

CVE-2024-46226

A stored cross site scripting XSS vulnerability in HelpDeskZ v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket...

PT-2025-8728

Name of the Vulnerable Software and Affected Versions HelpDeskZ versions prior to 2.0.2 Description A stored cross site scripting XSS issue allows remote attackers to execute arbitrary JavaScript in the administration panel. This is achieved by including a malicious payload into the file name and...

CVE-2024-46226

A stored cross site scripting XSS vulnerability in HelpDeskZ v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket...

CVE-2024-46226

A stored cross-site scripting (XSS) vulnerability exists in HelpDeskZ versions prior to v2.0.2 . A remote attacker can execute arbitrary JavaScript within the administration panel by injecting a malicious payload into the file name or using the upload file function while creating a new ticket. To...

CVE-2024-46226

A stored cross site scripting XSS vulnerability in HelpDeskZ v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket...

CVE-2024-46226: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in HelpDeskZ v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket...

CVE-2024-46226

A stored cross site scripting XSS vulnerability in HelpDeskZ v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket...

HelpDeskZ 跨站脚本漏洞

HelpDeskZ is a free PHP-based software from HelpDeskZ Open Source. Allows the use of a web-based support ticket system to manage site support. A cross-site scripting vulnerability exists in versions prior to HelpDeskZ v2.0.2. A remote attacker can exploit this vulnerability to execute arbitrary...

CVE-2024-46639

A cross-site scripting XSS vulnerability in HelpDeskZ v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field of Custom Fields message box...

CVE-2024-46639

A cross-site scripting (XSS) vulnerability exists in HelpDeskZ v2.0.2 (a PHP-based support ticket system). The flaw allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the Name text field of the Custom Fields message box. This vulnerability potentially ...