Helpdesk Pro Project maintains a single, focused ticketing and support platform that sits in the administrative tier of many organizations' IT infrastructure, presenting an authentication and data-handling attack surface. The recurrent vulnerability patterns center on information disclosure, path traversal, cross-site scripting, and SQL injection—characteristic weaknesses of web-based administrative applications where input validation and access controls govern sensitive ticket and user data. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Helpdesk Pro Project over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-4074HIGH Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter i | Sep 20, 2017 | 7.5 | 68 | NO | YES |
CVE-2015-4073CRITICAL Multiple SQL injection vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) ticket_code or (2) e | Sep 20, 2017 | 9.8 | 42 | NO | YES |
CVE-2015-4071MEDIUM The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http:// | Aug 18, 2017 | 5.3 | 27 | NO | YES |
CVE-2015-4072MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via vectors re | Sep 20, 2017 | 5.4 | 24 | NO | YES |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Helpdesk Pro Project.
Media articles that mention a CVE ID that affects a product developed by Helpdesk Pro Project — matched by CVE ID, not by vendor name.