Ladybirdweb vulnerabilities
We track 2 vulnerabilities in Ladybirdweb products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2024.
2vulnerabilities
0critical
2high
0exploited
8.5average CVSS score
Latest Ladybirdweb vulnerabilities
- 8.2 High severity
faveo_helpdesk: Improper Neutralization of Input During Web Page Generation
An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file.
- 8.8 High severity
Faveo Helpdesk: Improper Neutralization of Special Elements used in an SQL Command
Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQ