Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HelpDezk Community improper authorization
Vulnerability Description
SQL injection vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the rows parameter of the jsonGrid route and extract all the information stored in the application.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
HelpDezk SQL注入漏洞
Vulnerability Description
HelpDezk是HelpDezk公司的一款功能强大的软件。于管理请求/事件。 HelpDezk 1.1.10版本存在SQL注入漏洞，该漏洞源于允许远程攻击者向 jsonGrid 路由的 rows 参数发送特制的 SQL 查询，并提取应用程序中存储的所有信息。
CVSS Information
N/A
Vulnerability Type
N/A