high7.5Public exploit code
CVE-2005-1673
Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to index.php, (2) …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HelpCenter Live! < 1.2.7 - Multiple Vulnerabilities2004-05-17 · webapps · php
Impact
Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to index.php, (2) tid parameter to view.php, fid parameter to (3) download.php or (4) chat_download.php, (5) status parameter to icon.php, TICKET_tid parameter to (6) index.php or (7) view.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ubertec | Help Center Live | All versions |