Filtered by vendor Evolutionscript Subscriptions
Filtered by product Helpdeskz Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-26546 1 Evolutionscript 1 Helpdeskz 2024-11-21 7.5 High
An issue was discovered in HelpDeskZ 1.0.2. The feature to auto-login a user, via the RememberMe functionality, is prone to SQL injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVE-2024-46639 1 Evolutionscript 1 Helpdeskz 2024-09-26 7.6 High
A cross-site scripting (XSS) vulnerability in HelpDeskZ v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field of Custom Fields message box.