Asad Iqbal

2 exploits Active since Oct 2024

CVE-2024-46482 WRITEUP HIGH WRITEUP

Ladybird Web Solution Faveo-Helpdesk <2.0.3 - RCE

An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file.

CVSS 8.2

View Code

CVE-2024-51377 WRITEUP MEDIUM WRITEUP

Faveo Helpdesk 9.2.0 - Stored Cross-Site Scripting via Subject and Identifier Fields

An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk (On-Premise and Cloud) 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields

CVSS 5.4

View Code