High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-03-24	CVE-2023-25350	SQL Injection vulnerability in Ladybirdweb Faveo Helpdesk Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. network low complexity ladybirdweb CWE-89	8.8
2017-04-06	CVE-2017-7571	Cross-Site Request Forgery (CSRF) vulnerability in Ladybirdweb Faveo Helpdesk 1.9.3 public/rolechangeadmin in Faveo 1.9.3 allows CSRF. network low complexity ladybirdweb CWE-352	8.0

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.