Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 04/10/2002 Updated: 05/09/2008

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 645

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote malicious users to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.

Vulnerable Product	Search on Vulmon	Subscribe to Product
luis bernardo myhelpdesk

source: wwwsecurityfocuscom/bid/4971/info It is reported that MyHelpDesk (version 20020509 and earlier) are vulnerable to SQL injection attacks Data supplied by the remote user, via CGI parameters, is used directly as part of SQL statements As input sanitization is not properly performed, it is possible to modify the logic of a SQL que ...

NVD-CWE-Other http://www.securityfocus.com/bid/4971 http://www.iss.net/security_center/static/9321.php http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html https://nvd.nist.gov https://www.exploit-db.com/exploits/21527/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-0932

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect