20020610 [ARL02-A15] Multiple Security Issues in MyHelpdeskmailing list
http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html CVE-2002-0932
MyHelpDesk 20020509 - SQL Injection
Record summary
CVE-2002-0932 has a selected CVSS score of 6.4; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMyHelpDesk 20020509 - SQL InjectionExploitDB exploitby Ahmet Sabri ALPERNot analyzed1 file
References
4myhelpdesk-sql-injection(9321)vdb entry
http://www.iss.net/security_center/static/9321.php 4971vdb entry
http://www.securityfocus.com/bid/4971 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-0932