medium5.0Public exploit code
CVE-2003-0303
SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OneOrZero Helpdesk 1.4 - 'TUpdate.php' SQL Injection2003-05-15 · webapps · php · Verified
Impact
SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oneorzero | Oneorzero Helpdesk | Version 1.4_rc4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html
- http://marc.info/?l=bugtraq&m=105302025601231&w=2
- http://www.securityfocus.com/bid/7609
- http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html
- http://marc.info/?l=bugtraq&m=105302025601231&w=2
- http://www.securityfocus.com/bid/7609