Description
Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) lorder, (2) Priority, (3) Status, (4) Category, (5) searchvalue, and (6) field parameter.
Exploits (1)
References (6)
Core 6
Core References
Exploit vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1015270
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15570
Third Party Advisory x_refsource_misc
http://pridels0.blogspot.com/2005/11/isolsoft-support-center-sql-inj.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/21102
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17728
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2592
Scores
EPSS
0.0083
EPSS Percentile
74.6%
Details
Status
published
Products (1)
isolsoft/support_center
2.2
Published
Nov 26, 2005
Tracked Since
Feb 18, 2026