4 matches found
CVE-2023-42232: Improper Limitation of a Pathname to a Restricted Directory
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function...
CVE-2023-42234: Cross-Site Request Forgery (CSRF)
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Request Forgery CSRF via the WSCView function...
CVE-2023-42234
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Request Forgery CSRF via the WSCView function...
CVE-2023-42231: Improper Preservation of Permissions
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can delete admin users by sending a request to the "WSCView/Delete" function...