Ladybirdweb Faveo Helpdesk
4 CVEs affecting Ladybirdweb Faveo Helpdesk. Latest disclosed: 2024-11-01. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-25350 | High | 8.8 | 2023-03-24 | Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input d… |
CVE-2017-7571 | High | 8.0 | 2017-04-06 | public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges. |
CVE-2023-1724 | High | 7.3 | 2023-06-24 | Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the a… |
CVE-2024-51377 | Medium | 5.4 | 2024-11-01 | An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk (On-Premise and Cloud) 9.2.0 allows a remote attacker to execute arbitrary code via the Subject… |