Gregor Mynarsky

The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to `name` and `message`.

The issue allows remote attackers to execute arbitrary SQL commands via the `ticket code` or `email` parameter. Additionally, remote authenticated users can execute arbitrary SQL commands via the `filter order` parameter.

The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability. This is achieved by using a .. (dot dot) in the `filename` parameter within a "ticket.download attachment" task.

The issue allows remote attackers to write to arbitrary .ini files by using a crafted language.save task.

The issue allows remote attackers to read the support tickets of arbitrary users by obtaining the target ticketId and navigating to the "http://{target}/component/helpdeskpro/?view=ticket&id={ticketId}" endpoint.