7.5
CVSSv2

CVE-2005-3925

Published: 30/11/2005 Updated: 08/03/2011
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 760
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) detail[], (2) orderdir, and (3) orderby parameters to find.php, and the (4) id parameter to issue.php.

Vulnerable Product Search on Vulmon Subscribe to Product

helpdesk issue manager helpdesk issue manager 0.7

helpdesk issue manager helpdesk issue manager 0.8

helpdesk issue manager helpdesk issue manager 0.3

helpdesk issue manager helpdesk issue manager 0.4

helpdesk issue manager helpdesk issue manager 0.1

helpdesk issue manager helpdesk issue manager 0.2

helpdesk issue manager helpdesk issue manager 0.9

helpdesk issue manager helpdesk issue manager 0.5

helpdesk issue manager helpdesk issue manager 0.6

Exploits

source: wwwsecurityfocuscom/bid/15604/info Helpdesk Issue Manager is prone to multiple SQL injection vulnerabilities Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation Helpdesk Issue ...
source: wwwsecurityfocuscom/bid/15604/info Helpdesk Issue Manager is prone to multiple SQL injection vulnerabilities Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation Helpdesk Iss ...