CVE-2014-8337

概要

参考情報

• packetstormsecurity.com/files/128979/HelpDEZk-1.0.1-Unrestricted-File-Upload.html · Exploit
• htbridge.com/advisory/HTB23239 · Exploit

helpdezk のその他の脆弱性

• CVE-2023-3038高 7.5SQL injection vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to send a speci…
• CVE-2023-3037高 8.6Improper authorization vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to acc…
• CVE-2017-14146高 8.8HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the …
• CVE-2017-14145緊急 9.8HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATH_INFO, rela…
• CVE-2017-7447高 8.8HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.