102 matches found
CVE-2023-39147
An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file...
Design/Logic Flaw
An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file...
CVE-2023-39147
CVE-2023-39147 affects Uvdesk 1.1.3, describing an arbitrary file upload vulnerability that allows attackers to execute arbitrary code via uploading a crafted image file. Public references describe a remote code execution path through an uploaded shell (e.g., authenticated exploit in Uvdesk 1.1.3...
PT-2023-26805 · Uvdesk · Uvdesk
Name of the Vulnerable Software and Affected Versions: Uvdesk version 1.1.3 Description: An arbitrary file upload issue allows attackers to execute arbitrary code by uploading a crafted image file. Recommendations: For Uvdesk version 1.1.3, at the moment, there is no information about a newer...
CVE-2023-39147
An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file...
Uvdesk 1.1.3 Shell Upload
Exploit Title: Uvdesk v1.1.3 - File Upload Remote Code Execution RCE Authenticated Date: 28/07/2023 Exploit Author: Daniel Barros @cupc4k3d - Hakai Offensive Security Vendor Homepage: https://www.uvdesk.com Software Link: https://github.com/uvdesk/community-skeleton Version: 1.1.3 Example: python...
CVE-2023-39147
An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file...
Uvdesk 代码问题漏洞
Uvdesk is a complete ticket support system open source by Uvdesk India. A security vulnerability exists in Uvdesk v1.1.3, which stems from the presence of a file upload vulnerability that can be exploited by an attacker to cause Remote Code Execution RCE...
Uvdesk v1.1.3 - File Upload Remote Code Execution (Authenticated) Exploit
Exploit Title: Uvdesk v1.1.3 - File Upload Remote Code Execution RCE Authenticated Exploit Author: Daniel Barros @cupc4k3d - Hakai Offensive Security Vendor Homepage: https://www.uvdesk.com Software Link: https://github.com/uvdesk/community-skeleton Version: 1.1.3 Example: python3 CVE-2023-39147....
Uvdesk v1.1.3 - File Upload Remote Code Execution (RCE) (Authenticated)
Exploit Title: Uvdesk v1.1.3 - File Upload Remote Code Execution RCE Authenticated Date: 28/07/2023 Exploit Author: Daniel Barros @cupc4k3d - Hakai Offensive Security Vendor Homepage: https://www.uvdesk.com Software Link: https://github.com/uvdesk/community-skeleton Version: 1.1.3 Example: python...
Cross Site Scripting (XSS)
uvdesk/community-skeleton is vulnerable to Cross Site Scripting XSS. The vulnerability exists because the library does not properly validate the messages sent by the clients in the ticket, which allows an attacker to inject and execute arbitrary JavaScript into the browser...
GHSA-FWHV-9PHJ-WRJ5 Uvdesk vulnerable to stored cross-site scripting (XSS)
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...
GHSA-2HW6-4RV9-82FP Uvdesk remote code execution vulnerability
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...
Uvdesk vulnerable to stored cross-site scripting (XSS)
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...
Uvdesk remote code execution vulnerability
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...
CVE-2023-0265
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...
CVE-2023-0325
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...
Code injection
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...
Cross site scripting
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...
CVE-2023-0265
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...