Ladybirdweb kayıtları

ladybirdweb üreticisine ait 6 yayımlanmış kayıt.

Araştırmacı profili

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

6 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2023-25350İstismar yok	Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection.ladybirdweb · faveo helpdesk · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,8	24 Mar 2023
33İzleyin	CVE-2017-7571Kavram kanıtı	public/rolechangeadmin in Faveo 1.9.3 allows CSRF.ladybirdweb · faveo helpdesk · CWE-352 CSRF	Yüksek8,0	—	%2,2	6 Nis 2017
32İzleyin	CVE-2024-46482İstismar yok	An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to CWE-79 Girişsiz RCE Dosya yükleme XSS	Yüksek8,2	—	%0,3	22 Eki 2024
26İzleyin	CVE-2023-24625İstismar yok	Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attladybirdweb · faveo servicedesk · CWE-639 Erişim denetimi (IDOR)	Orta6,5	—	%1,0	24 Mar 2023
21İzleyin	CVE-2024-51377İstismar yok	An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk (On-Premise and Cloud) 9.2.0 allows a remote attacker to execute arbitrary coladybirdweb · faveo helpdesk · CWE-79 RCE XSS	Orta5,4	—	%0,4	1 Kas 2024
21İzleyin	CVE-2023-1724İstismar yok	Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSSladybirdweb · faveo helpdesk · CWE-79 XSS	Orta5,4	—	%0,4	23 Haz 2023

CVE-2023-25350
35İzleyin
Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection.
YüksekCVSS 8,8İstismar yokEPSS %0
- SQL enjeksiyonu
ladybirdweb · faveo helpdesk24 Mar 2023
CVE-2017-7571
33İzleyin
public/rolechangeadmin in Faveo 1.9.3 allows CSRF.
YüksekCVSS 8,0Kavram kanıtıEPSS %2
- CSRF
ladybirdweb · faveo helpdesk6 Nis 2017
CVE-2024-46482
32İzleyin
An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to
YüksekCVSS 8,2İstismar yokEPSS %0
22 Eki 2024
CVE-2023-24625
26İzleyin
Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) att
OrtaCVSS 6,5İstismar yokEPSS %1
- Erişim denetimi (IDOR)
ladybirdweb · faveo servicedesk24 Mar 2023
CVE-2024-51377
21İzleyin
An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk (On-Premise and Cloud) 9.2.0 allows a remote attacker to execute arbitrary co
OrtaCVSS 5,4İstismar yokEPSS %0
- RCE
- XSS
ladybirdweb · faveo helpdesk1 Kas 2024
CVE-2023-1724
21İzleyin
Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
ladybirdweb · faveo helpdesk23 Haz 2023