CVE-2015-4073

Critical

Published: 20/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Helpdesk Pro plugin before version 1.4.0 for Joomla! contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the ticket_code, email, or filter_order parameters.

Risk Assessment

Attackers may gain access to sensitive data in the database, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to update the Helpdesk Pro plugin to version 1.4.0 or later and conduct a security audit of the application.

Original NVD description (English source)

Multiple SQL injection vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) ticket_code or (2) email parameter or (3) remote authenticated users to execute arbitrary SQL commands via the filter_order parameter.