CVE-2015-4071 The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http://{target}/component/h...
MediumCVSS 5.3
EPSS 9.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http://{target}/component/helpdeskpro/?view=ticket&id={ticketId}.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| helpdesk pro project helpdesk pro | <= 1.3.0 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20151231 Joomla! plugin Helpdesk Pro < 1.4.0 exploit mailing-list third-party-advisory
- 20151231 New CVE's to be released the 17th of June. exploit mailing-list third-party-advisory
- 75971 third-party-advisory vdb-entry
- 37666 exploit third-party-advisory vdb-entry