medium6.4Public exploit code
CVE-2002-0932
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via S…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MyHelpDesk 20020509 - SQL Injection2002-06-10 · webapps · php · Verified
Impact
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Luis Bernardo | Myhelpdesk | through 2002-05-09 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html
- http://www.iss.net/security_center/static/9321.php
- http://www.securityfocus.com/bid/4971
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html
- http://www.iss.net/security_center/static/9321.php
- http://www.securityfocus.com/bid/4971