Faveo Helpdesk vulnerabilities

2 known vulnerabilities in Faveo Helpdesk from Ladybirdweb. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  faveo_helpdesk: Improper Neutralization of Input During Web Page Generation

  CVE-2024-46482Oct 22, 2024Ladybirdweb

  An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file.

• 8.8 High severity

  Faveo Helpdesk: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-25350Mar 24, 2023Ladybirdweb

  Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQ