CVE-2017-7446

Description

References

• rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html · Exploit
• securityfocus.com/bid/97484 · Third Party Advisory
• albandes/helpdezk · Patch
• exploit-db.com/exploits/41824

helpdezk의 다른 취약점

• CVE-2023-3038높음 7.5SQL injection vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to send a speci…
• CVE-2023-3037높음 8.6Improper authorization vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to acc…
• CVE-2014-8337심각 9.8Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier allows remote attack…
• CVE-2017-14146높음 8.8HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the …
• CVE-2017-14145심각 9.8HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATH_INFO, rela…