CVE-2015-4071

State: Published
Severity: Not scored
Published: Aug 18, 2017
Updated: Aug 6, 2024
Reserved: May 22, 2015

Description

The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http://{target}/component/helpdeskpro/?view=ticket&id={ticketId}.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

37666exploit
20151231 New CVE's to be released the 17th of June.mailing-list
http://packetstormsecurity.com/files/132766/Joomla-Helpdesk-Pro-XSS-File-Disclosure-SQL-Injection.html
75971vdb-entry
20151231 Joomla! plugin Helpdesk Pro < 1.4.0mailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.