SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html | |
http://www.iss.net/security_center/static/9321.php | Vendor Advisory |
http://www.securityfocus.com/bid/4971 | Exploit Vendor Advisory |
Configurations
History
No history.
Information
Published : 2002-10-04 04:00
Updated : 2024-02-04 16:31
NVD link : CVE-2002-0932
Mitre link : CVE-2002-0932
CVE.ORG link : CVE-2002-0932
JSON object : View
Products Affected
luis_bernardo
- myhelpdesk
CWE