CVE-2017-7447

HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-04-05

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Helpdezk (Helpdezk)

References

• http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html
• http://www.securityfocus.com/bid/97485
• https://github.com/albandes/helpdezk/issues/2
• https://www.exploit-db.com/exploits/41824/