Vulnerabilities > Ladybirdweb > Faveo Helpdesk > High

DATE CVE VULNERABILITY TITLE RISK
2023-03-24 CVE-2023-25350 SQL Injection vulnerability in Ladybirdweb Faveo Helpdesk
Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection.
network
low complexity
ladybirdweb CWE-89
8.8
8.8
2017-04-06 CVE-2017-7571 Cross-Site Request Forgery (CSRF) vulnerability in Ladybirdweb Faveo Helpdesk 1.9.3
public/rolechangeadmin in Faveo 1.9.3 allows CSRF.
network
low complexity
ladybirdweb CWE-352
8.0
8.0