Headstart Solutions
Headstart Solutions Deskpro: vulnerabilidades y CVE
Headstart Solutions Deskpro tiene 7 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2007-4413 | Baja (3.5) | 0.85% | — | 18 ago 2007 | Direct static code injection vulnerability in admincp/user_help.php in Headstart Solutions DeskPRO 3.0.2 allows remote authenticated users to inject arbitrary PHP code into an unspecified file via a new_entry value in… |
| CVE-2007-4412 | Baja (3.5) | 0.84% | — | 18 ago 2007 | Multiple cross-site scripting (XSS) vulnerabilities in Headstart Solutions DeskPRO 3.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to (1) techs.php, (2)… |
| CVE-2006-6999 | Media (4.3) | 1.1% | — | 12 feb 2007 | attachment.php in Headstart Solutions DeskPRO allows remote attackers to read all uploaded files by providing the file number in a modified id parameter. |
| CVE-2006-6998 | Media (5) | 1.1% | — | 12 feb 2007 | install/loader_help.php in Headstart Solutions DeskPRO allows remote attackers to obtain configuration information via a q=phpinfo QUERY_STRING, which calls the phpinfo function. |
| CVE-2006-7000 | Media (5) | 1.2% | — | 12 feb 2007 | Headstart Solutions DeskPRO allows remote attackers to obtain the full path via direct requests to (1) email/mail.php, (2) includes/init.php, (3) certain files in includes/cron/, and (4) jpgraph.php, (5)… |
| CVE-2006-6974 | Alta (7.5) | 1.3% | — | 7 feb 2007 | Headstart Solutions DeskPRO stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) list files in the includes/ directory; obtain the SQL username and… |
| CVE-2006-6973 | Alta (7.5) | 1.4% | — | 7 feb 2007 | Headstart Solutions DeskPRO does not require authentication for certain files and directories associated with administrative activities, which allows remote attackers to (1) reinstall the application via a direct… |