Gregor Mynarsky

**Name of the Vulnerable Software and Affected Versions** Helpdesk Pro plugin versions prior to 1.4.0 **Description** The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to `name` and `message`. **Recommendations** For versions prior to 1.4.0, update to version 1.4.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Helpdesk Pro plugin versions prior to 1.4.0 for Joomla! **Description** The issue allows remote attackers to execute arbitrary SQL commands via the `ticket code` or `email` parameter. Additionally, remote authenticated users can execute arbitrary SQL commands via the `filter order` parameter. **Recommendations** For versions prior to 1.4.0, update to version 1.4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the `ticket code`, `email`, and `filter order` parameters to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Helpdesk Pro plugin versions prior to 1.4.0 **Description** The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability. This is achieved by using a .. (dot dot) in the `filename` parameter within a "ticket.download attachment" task. **Recommendations** For versions prior to 1.4.0, update to version 1.4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the ticket.download attachment task to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Helpdesk Pro plugin versions prior to 1.4.0 **Description** The issue allows remote attackers to write to arbitrary .ini files by using a crafted language.save task. **Recommendations** For versions prior to 1.4.0, update to version 1.4.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Helpdesk Pro Plugin versions prior to 1.4.0 **Description** The issue allows remote attackers to read the support tickets of arbitrary users by obtaining the target ticketId and navigating to the "http://{target}/component/helpdeskpro/?view=ticket&id={ticketId}" endpoint. **Recommendations** For versions prior to 1.4.0, update to version 1.4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the /component/helpdeskpro/?view=ticket&id={ticketId} endpoint until the update is applied.