CVE-2023-42230

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the WSCView/Save function...

CVE-2023-42227

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function...

CVE-2023-42228

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function...

PT-2025-1456 · Pat Infinite Solutions · Helpdeskadvanced

Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to Cross Site Scripting XSS via the WSCView/Save function. This allows for potential malicious script execution. No information is provided about the...

CVE-2023-42230: Improper Neutralization of Input During Web Page Generation

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the WSCView/Save function...

CVE-2023-42226

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function...

Pat Infinite Solutions HelpdeskAdvanced 安全漏洞

Pat Infinite Solutions HelpdeskAdvanced is an automated solution for strategic governance of Service Management activities from Pat Infinite Solutions. A security vulnerability exists in Pat Infinite Solutions HelpdeskAdvanced version 11.0.33 and prior versions. An attacker can exploit the...

Pat Infinite Solutions HelpdeskAdvanced 安全漏洞

Pat Infinite Solutions HelpdeskAdvanced is an automated solution for strategic governance of Service Management activities from Pat Infinite Solutions. A security vulnerability exists in Pat Infinite Solutions HelpdeskAdvanced version 11.0.33 and prior versions. An attacker can exploit the...

CVE-2023-42227: Improper Limitation of a Pathname to a Restricted Directory

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function...

PT-2025-1453 · Pat Infinite Solutions · Helpdeskadvanced

Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to Directory Traversal via the WSCView/Save function. This allows for potential unauthorized access to sensitive files and directories...

CVE-2023-42230

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the WSCView/Save function...

PT-2025-1452 · Pat Infinite Solutions · Helpdeskadvanced

Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to Directory Traversal via the Email/SaveAttachment function. This allows unauthorized access to sensitive files and directories. Recommendations: Fo...

Pat Infinite Solutions HelpdeskAdvanced 安全漏洞

Pat Infinite Solutions HelpdeskAdvanced is an automated solution for strategic governance of Service Management activities from Pat Infinite Solutions. A security vulnerability exists in Pat Infinite Solutions HelpdeskAdvanced version 11.0.33 and prior versions. An attacker can exploit this...

PT-2025-1454 · Pat Infinite Solutions · Helpdeskadvanced

Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue allows low-privileged users to edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function, indicating an incorrect acce...

JeeWMS 注入漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. An injection vulnerability exists in JeeWMS 20241229 and earlier versions, which stems from SQL injection in the saveOrUpdate function...

PT-2025-1791 · WordPress · Gs Insever Portfolio

Name of the Vulnerable Software and Affected Versions: GS Insever Portfolio plugin for WordPress versions up to, and including, 1.4.5 Description: The issue is related to unauthorized modification of data due to a missing capability check on the save settings function. This allows authenticated...

PT-2025-1716 · WordPress · Responsive Flipbook Plugin

Name of the Vulnerable Software and Affected Versions: Responsive FlipBook Plugin for WordPress versions up to, and including, 2.5.0 Description: The issue is a Stored Cross-Site Scripting vulnerability due to insufficient input sanitization and output escaping in the rfbwp save settings function...

WordPress plugin GS Insever Portfolio 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-9697

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tweetsettingssave and tweetsettingsupdate functions in all versions up to, and including, 1.3.4. This makes it possible for authenticated...

PT-2025-3734

Name of the Vulnerable Software and Affected Versions The Social Rocket – Social Sharing Plugin versions up to, and including, 1.3.4 Description The issue allows authenticated attackers with Subscriber-level access and above to update the plugin's settings due to a missing capability check on the...