NetSight
critical9.8

CVE-2023-3038

SQL injection vulnerability in HelpDezk Community affecting version 1.1.10.

Impact

SQL injection vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the rows parameter of the jsonGrid route and extract all the information stored in the application.

Affected products

VendorProductAffected versions
HelpdezkHelpdezk
Version 1.1.10

Weakness classification

References