44 matches found
CVE-2023-42226
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function...
CVE-2023-42233
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the Filter/FilterEditor function...
CVE-2023-42231
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can delete admin users by sending a request to the "WSCView/Delete" function...
CVE-2023-42232
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function...
CVE-2023-42234
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Request Forgery CSRF via the WSCView function...
CVE-2023-42230
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the WSCView/Save function...
CVE-2023-42228
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function...
CVE-2023-42229
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal. Arbitrary files can be created on the system via authenticated SOAP requests to the WSConnector service...
CVE-2023-42232
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function...
CVE-2023-42234
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Request Forgery CSRF via the WSCView function...
CVE-2023-42230
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the WSCView/Save function...
CVE-2023-42227
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function...
CVE-2023-42229
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal. Arbitrary files can be created on the system via authenticated SOAP requests to the WSConnector service...
Pat Infinite Solutions HelpdeskAdvanced 安全漏洞
Pat Infinite Solutions HelpdeskAdvanced is an automated solution for strategic governance of Service Management activities from Pat Infinite Solutions. A security vulnerability exists in Pat Infinite Solutions HelpdeskAdvanced version 11.0.33 and prior versions. An attacker can exploit this...
CVE-2023-42225
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function...
CVE-2023-42227
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function...
Pat Infinite Solutions HelpdeskAdvanced 安全漏洞
Pat Infinite Solutions HelpdeskAdvanced is an automated solution for strategic governance of Service Management activities from Pat Infinite Solutions. A security vulnerability exists in Pat Infinite Solutions HelpdeskAdvanced version 11.0.33 and prior versions. An attacker can exploit this...
CVE-2023-42231
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can delete admin users by sending a request to the "WSCView/Delete" function...
CVE-2023-42231
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can delete admin users by sending a request to the "WSCView/Delete" function...
CVE-2023-42229
CVE-2023-42229 affects Pat Infinite Solutions HelpdeskAdvanced, versions 11.0.33 and earlier. The vulnerability is a Directory Traversal via authenticated SOAP requests to the WSConnector service, enabling arbitrary files to be created on the target system. Public documents corroborate the issue ...