CVE-2015-4072

CVE-2015-4072 affects the Joomla! Helpdesk Pro plugin prior to version 1.4.0. The vulnerability is described as cross-site scripting (XSS) via input fields related to name and message, allowing remote attackers to inject arbitrary scripts. The root cause is an XSS condition in the plugin’s handli...

ICHelpDesk 1.1 SQL Injection

Exploit Title: Support Tickets Helpdesk PHP Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/support-tickets-helpdesk-script.htm Demo: http://icloudcenter.net/demos/ichelpdesk/ Version: 1.1 Category:...

ICHelpDesk 1.1 - 'pk' SQL Injection

Exploit Title: Support Tickets Helpdesk PHP Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/support-tickets-helpdesk-script.htm Demo: http://icloudcenter.net/demos/ichelpdesk/ Version: 1.1 Category:...

CVE-2015-4071

The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http://target/component/helpdeskpro/?view=ticket&id=ticketId...

Code injection

The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http://target/component/helpdeskpro/?view=ticket&id=ticketId...

CVE-2015-4071

CVE-2015-4071 affects the Joomla! Helpdesk Pro Plugin prior to version 1.4.0. The vulnerability is an information disclosure: remote attackers can read arbitrary users’ support tickets by obtaining a ticketId and visiting /component/helpdeskpro/?view=ticket&id={ticketId}. Root cause is improper a...

CVE-2015-4071

The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http://target/component/helpdeskpro/?view=ticket&id=ticketId...

Zendesk: Twitter SSO allows unverified e-mail registration, leads to Slack and social media hijacks

See title. SEE BLOGPOST: "How I hacked hundreds of companies through their helpdesk" https://medium.com/@intideceukelaire/how-i-hacked-hundreds-of-companies-through-their-helpdesk-b7680ddc2d4c...

Google Docs Phishing Campaign

US-CERT is aware of a phishing campaign that affected Google Docs users. The campaign used spoofed email addresses to target users with emails purporting to share a document for collaboration. Once the targeted users accepted invitations, they were encouraged to allow the phishing program access ...

Faveo Helpdesk Community 1.9.3 Cross Site Request Forgery

Exploit Title: CSRF / Privilege Escalation Manipulation of Role Agent to Admin on Faveo version Community 1.9.3 Google Dork: no Date: 05-April-2017 Exploit Author: @runggareksya, @yokoacc, @AdyWikradinata, @dickysofficial, @dvnrcy Vendor Homepage: http://www.faveohelpdesk.com/ Software Link:...

List of hotfixes and updates that are contained in System Center Configuration Manager 2007 Service Pack 2

Lists Microsoft Knowledge Base KB articles that describe the hotfixes and updates that are contained in Microsoft System Center Configuration Manager 2007 Service Pack 2 SP2.INTRODUCTIONThis article lists Microsoft Knowledge Base KB articles that describe the hotfixes and updates that are contain...

Zammad cross-site scripting vulnerability (CNVD-2017-04306)

Zammad is a web-based, open-source helpdesk/customer support system from the German company Zammad, with many features to manage customer communication through multiple channels such as phone calls. A cross-site scripting vulnerability exists in Zammad. An attacker can exploit this vulnerability ...

Zammad Cross-Site Scripting Vulnerability

Zammad is a web-based, open-source helpdesk/customer support system from the German company Zammad, with many features to manage customer communication through multiple channels such as phone calls. A cross-site scripting vulnerability exists in Zammad. An attacker can exploit this vulnerability ...

Zammad Security Bypass Vulnerability

Zammad is a web-based, open-source helpdesk/customer support system from the German company Zammad, with many features to manage customer communication through multiple channels such as phone calls. A security bypass vulnerability exists in Zammad. An attacker could exploit the vulnerability to...

Joomla MaQma Helpdesk 4.2.7 Component - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component MaQma Helpdesk v4.2.7 - SQL Injection Google Dork: inurl:index.php?option=commaqmahelpdesk Date: 20.02.2017 Vendor Homepage: http://componentslab.com/ Software Buy:...

Joomla MaQma Helpdesk 4.2.7 SQL Injection

Exploit Title: Joomla! Component MaQma Helpdesk v4.2.7 - SQL Injection Google Dork: inurl:index.php?option=commaqmahelpdesk Date: 20.02.2017 Vendor Homepage: http://componentslab.com/ Software Buy: https://extensions.joomla.org/extensions/extension/clients-a-communities/help-desk/maqma-helpdesk/...

Joomla! Component MaQma Helpdesk 4.2.7 - id SQL Injection

Joomla! Component MaQma Helpdesk 4.2.7 - id SQL Injection Exploit Title: Joomla! Component MaQma Helpdesk v4.2.7 - SQL Injection Google Dork: inurl:index.php?option=commaqmahelpdesk Date: 20.02.2017 Vendor Homepage: http://componentslab.com/ Software Buy:...

Joomla! Component MaQma Helpdesk 4.2.7 - 'id' SQL Injection

Exploit Title: Joomla! Component MaQma Helpdesk v4.2.7 - SQL Injection Google Dork: inurl:index.php?option=commaqmahelpdesk Date: 20.02.2017 Vendor Homepage: http://componentslab.com/ Software Buy: https://extensions.joomla.org/extensions/extension/clients-a-communities/help-desk/maqma-helpdesk/...

ReadyDesk Security Bypass Vulnerability

ReadyDesk is a Web-based helpdesk software solution from ReadyDesk, Inc. A security bypass vulnerability exists in ReadyDesk version 9.1, which stems from the use of hard-coded encryption for user credentials. An attacker could exploit the vulnerability to obtain a password...

helpdesk.pc-tronix.com XSS vulnerability

Vulnerable URL: http://helpdesk.pc-tronix.com/knowledgebase.php?act=search=="=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...