HelpDezk records

7 published records for vendor helpdezk.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2014-8337No exploit	Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier allows remote attackhelpdezk · helpdezk · CWE-434 pre-auth RCE File upload	Critical9.8	—	4.7%	Jan 3, 2020
39Monitor	CVE-2017-14145No exploit	HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATH_INFO, relahelpdezk · helpdezk · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.1%	Sep 5, 2017
36Monitor	CVE-2017-7447Proof of concept	HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.helpdezk · helpdezk · CWE-352 Pre-auth CSRF	High8.8	—	3.4%	Apr 5, 2017
36Monitor	CVE-2017-7446Proof of concept	HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.helpdezk · helpdezk · CWE-352 Pre-auth CSRF	High8.8	—	3.0%	Apr 5, 2017
35Monitor	CVE-2017-14146No exploit	HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the helpdezk · helpdezk · CWE-94 RCE	High8.8	—	1.3%	Sep 5, 2017
34Monitor	CVE-2023-3037No exploit	HelpDezk Community improper authorizationhelpdezk · helpdezk · CWE-285 Pre-auth Auth bypass Broken access control (IDOR)	High8.6	—	0.7%	Oct 4, 2023
30Monitor	CVE-2023-3038No exploit	HelpDezk Community improper authorizationhelpdezk · helpdezk · CWE-89 Pre-auth SQL injection	High7.5	—	0.8%	Oct 4, 2023

CVE-2014-8337
40Plan
Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier allows remote attack
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
- File upload
helpdezk · helpdezkJan 3, 2020
CVE-2017-14145
39Monitor
HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATH_INFO, rela
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
helpdezk · helpdezkSep 5, 2017
CVE-2017-7447
36Monitor
HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.
HighCVSS 8.8Proof of conceptEPSS 3%
- Pre-auth
- CSRF
helpdezk · helpdezkApr 5, 2017
CVE-2017-7446
36Monitor
HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.
HighCVSS 8.8Proof of conceptEPSS 3%
- Pre-auth
- CSRF
helpdezk · helpdezkApr 5, 2017
CVE-2017-14146
35Monitor
HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the
HighCVSS 8.8No exploitEPSS 1%
- RCE
helpdezk · helpdezkSep 5, 2017
CVE-2023-3037
34Monitor
HelpDezk Community improper authorization
HighCVSS 8.6No exploitEPSS 0%
helpdezk · helpdezkOct 4, 2023
CVE-2023-3038
30Monitor
HelpDezk Community improper authorization
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
helpdezk · helpdezkOct 4, 2023