high7.5
CVE-2004-1498
SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToU…
Impact
SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webhost Automation | Helm Control Panel | Versions 3.1.10, 3.1.11, 3.1.12, 3.1.13, 3.1.14, 3.1.15 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109943858026542&w=2
- http://secunia.com/advisories/13079
- http://www.hat-squad.com/en/000077.html
- http://www.securityfocus.com/bid/11586
- http://marc.info/?l=bugtraq&m=109943858026542&w=2
- http://secunia.com/advisories/13079
- http://www.hat-squad.com/en/000077.html
- http://www.securityfocus.com/bid/11586