CVE-2015-4073
CriticalSummary
The Helpdesk Pro plugin before version 1.4.0 for Joomla! contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the ticket_code, email, or filter_order parameters.
Risk Assessment
Attackers may gain access to sensitive data in the database, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update the Helpdesk Pro plugin to version 1.4.0 or later and conduct a security audit of the application.
Other vulnerabilities in Helpdesk Pro plugin for Joomla!
See all- CVE-2015-4075High
The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted language.save task.
- CVE-2015-4074High
Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a ticket.download_attachment task.
Original NVD description (English source)
Multiple SQL injection vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) ticket_code or (2) email parameter or (3) remote authenticated users to execute arbitrary SQL commands via the filter_order parameter.