8.1
High
CVE-2025-30901 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Help Desk js-support-ticket allows PHP Local File Inclusion.This issue affects JS Help Desk: from n/a through <= 2.9.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JS Help Desk 2.9 | earliest → 2.9.2 | No fix stated |
Other CVEs of JS Help Desk
The 10 CVEs of JS Help Desk →
CVE-2026-57652
Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions
5.3
Medium
CVE-2026-32535
Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows…
6.5
Medium
CVE-2026-32534
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help…
8.5
High
CVE-2026-24959
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help…
8.5
High