helpdesk vulnerabilities

2 known vulnerabilities in helpdesk from PrestaShop. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  helpdesk: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-34992Jun 24, 2024PrestaShop

  SQL Injection vulnerability in the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0 from FME Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via 'Tickets::getsearchedtickets(

• 10.0 Critical severity

  helpdesk: Unrestricted Upload of File with Dangerous Type

  CVE-2024-34990Jun 19, 2024PrestaShop

  In the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0 from FME Modules for PrestaShop, a customer can upload .php files. Methods `HelpdeskHelpdeskModuleFrontController::submitTicket()` and `HelpdeskHelpdeskModuleFrontCon