CVE-2015-4074

HIGH EXPLOITED NUCLEI

Helpdesk Pro < 1.3.0 - Path Traversal via Ticket Download Attachment Filename Parameter

Title source: llm

Exploitation Summary

CVE-2015-4074 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Simon Rawet. A Nuclei detection template is also available.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in Joomla! Helpdesk Pro < 1.4.0, including SQL injection, XSS, path traversal, and file upload. The PoC provides clear examples of how to exploit these vulnerabilities, including unauthenticated and authenticated attack vectors.

Description

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a ticket.download_attachment task.

Exploits (1)

exploitdb WORKING POC

by Simon Rawet · textwebappsphp

https://www.exploit-db.com/exploits/37666

View Code ZIP pw:eip

The exploit demonstrates multiple vulnerabilities in Joomla! Helpdesk Pro < 1.4.0, including SQL injection, XSS, path traversal, and file upload. The PoC provides clear examples of how to exploit these vulnerabilities, including unauthenticated and authenticated attack vectors.

Classification

Working Poc 100%

Attack Type

Sqli | Xss | Info Leak | Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: Joomla! Helpdesk Pro < 1.4.0

No auth needed

Prerequisites: Access to the target Joomla! Helpdesk Pro instance

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1189 - Drive-by Compromise T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

Joomla! Helpdesk Pro plugin <1.4.0 - Local File Inclusion

HIGHby 0x_Akoko

References (4)

Core 4

Core References

Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/37666/

Exploit, Third Party Advisory, VDB Entry x_refsource_misc

http://packetstormsecurity.com/files/132766/Joomla-Helpdesk-Pro-XSS-File-Disclosure-SQL-Injection.html

Exploit, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/75971

Exploit, Mailing List, Third Party Advisory, VDB Entry mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2015/Jul/102

Scores

CVSS v3 7.5

EPSS 0.8582

EPSS Percentile 99.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

VulnCheck KEV 2024-09-19

CWE

CWE-22

Status published

Products (1)

helpdesk_pro_project/helpdesk_pro < 1.3.0

Published Sep 20, 2017

Tracked Since Feb 18, 2026