| CVE-2026-57652 |
Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions
|
5.3
Medium
|
Jun 26, 2026 |
| CVE-2026-32534 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help…
|
8.5
High
|
Mar 25, 2026 |
| CVE-2026-32535 |
Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows…
|
6.5
Medium
|
Mar 25, 2026 |
| CVE-2026-24959 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help…
|
8.5
High
|
Feb 20, 2026 |
| CVE-2025-30901 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
8.1
High
|
Apr 1, 2025 |
| CVE-2025-30886 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help…
|
9.3
Critical
|
Apr 1, 2025 |
| CVE-2025-30882 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk…
|
7.5
High
|
Apr 1, 2025 |
| CVE-2025-30880 |
Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured…
|
7.5
High
|
Apr 1, 2025 |
| CVE-2025-30878 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk…
|
8.6
High
|
Apr 1, 2025 |
| CVE-2024-51670 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help…
|
5.9
Medium
|
Nov 9, 2024 |