CVE-2023-1724

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS...

Cross site scripting

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS...

CVE-2023-1724 Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS...

CVE-2023-1724 Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS...

CVE-2023-1724

CVE-2023-1724 affects Faveo Helpdesk Enterprise 6.0.1. The vulnerability is a stored XSS in the application that enables privilege escalation for an attacker possessing agent permissions. Documented impact states that an agent with privileges can escalate within the app; no public exploitation de...

PT-2023-17193 · Unknown · Faveo Helpdesk Enterprise

Name of the Vulnerable Software and Affected Versions: Faveo Helpdesk Enterprise version 6.0.1 Description: The issue allows an attacker with agent permissions to perform privilege escalation on the application due to a stored XSS vulnerability. Recommendations: For Faveo Helpdesk Enterprise...

Faveo Helpdesk 跨站脚本漏洞

Faveo Helpdesk is Faveo's open source ticketing system built on the Laravel framework. A security vulnerability exists in Faveo Helpdesk Enterprise version 6.0.1, which stems from the vulnerability of the application to stored XSS, allowing an attacker with proxy privileges to perform privilege...

CVE-2023-35053

In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms...

CVE-2023-35053

In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms...

Design/Logic Flaw

In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms...

CVE-2023-35053

CVE-2023-35053 affects JetBrains YouTrack prior to version 2023.1.10518. The issue allows a denial-of-service via Helpdesk forms, impacting availability (the CVSS v3.1 vector indicates network attack with low complexity, no privileges required, and high availability impact). Remediation per the r...

CVE-2023-35053

In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms...

CVE-2023-35053

In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms...

JetBrains YouTrack 资源管理错误漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A resource management error vulnerability exists in versions prior to JetBrains YouTrac...

CVE-2023-25350

Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection...

CVE-2023-25350

Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection...

Sql injection

Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection...

Faveo 安全漏洞

Faveo Helpdesk is an open source ticketing system built by Faveo based on Laravel framework. A security vulnerability exists in Faveo version 5.0.1. Attackers use the vulnerability to modify user IDs to obtain sensitive information...

CVE-2023-25350

Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection...

CVE-2023-25350

CVE-2023-25350 affects Faveo Helpdesk versions 1.0–1.11.1. The vulnerability is a SQL injection in the login flow caused by input data from the frontend to the backend being controllable, allowing injection through the login box. The available documents consistently describe the issue and its imp...