Filtered by vendor Cromosoft Subscriptions
Filtered by product Facil Helpdesk Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2009-4543 1 Cromosoft 1 Facil Helpdesk 2024-08-07 N/A
PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.
CVE-2009-4544 1 Cromosoft 1 Facil Helpdesk 2024-08-07 N/A
Cross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.