CVE-2004-2562

LBE Web Helpdesk <4.0.0.81 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Noam Rathaus · perlwebappsasp

https://www.exploit-db.com/exploits/24300

View Code ZIP pw:eip

References (6)

[Exploit, Patch] http://www.securiteam.com/windowsntfocus/5QP0M0ADGI.html

[Patch, Vendor Advisory] http://secunia.com/advisories/12123

[URL Repurposed] http://www.lbehelpdesk.com/patch/web/history.txt

[Third Party Advisory, VDB Entry] http://www.osvdb.org/8181

[Exploit, Patch] http://www.securityfocus.com/bid/10773

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/16779

Scores

EPSS 0.0145

EPSS Percentile 80.9%

Details

Status published

Products (36)

leigh_business_enterprises/web_helpdesk 1.2_1999-07-00

leigh_business_enterprises/web_helpdesk 1.3_2000-07-00

leigh_business_enterprises/web_helpdesk 1.4_2000-08-00

leigh_business_enterprises/web_helpdesk 4.0.0.33_2001-05-00

leigh_business_enterprises/web_helpdesk 4.0.0.35_2001-06-04

leigh_business_enterprises/web_helpdesk 4.0.0.38_2001-06-10

leigh_business_enterprises/web_helpdesk 4.0.0.40_2001-07-21

leigh_business_enterprises/web_helpdesk 4.0.0.41_2001-08-27

leigh_business_enterprises/web_helpdesk 4.0.0.43_2001-09-28

leigh_business_enterprises/web_helpdesk 4.0.0.50

... and 26 more

Published Dec 31, 2004

Tracked Since Feb 18, 2026