CVE-2007-4413

no score yetEPSS 0.8%

Direct static code injection vulnerability in admincp/user_help.php in Headstart Solutions DeskPRO 3.0.2 allows remote authenticated users to inject arbitrary PHP code into an unspecified file via a new_entry value in the do parameter.

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
Published: 2007-08-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

headstart_solutions:deskpro

References

http://osvdb.org/46653
http://securityreason.com/securityalert/3029
http://www.securityfocus.com/archive/1/476454/100/0/threaded
http://osvdb.org/46653
http://securityreason.com/securityalert/3029

Check your stack JSON