CVE-2023-25350

Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection

High · published March 24, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00805 · 56.3th percentile
Published
2023-03-24T00:00Z
EPSS history
Timeline
  • 24 MAR 00:00Z
    Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection
    cvelistv5