high7.5
CVE-2005-4617
SQL injection vulnerability in tickets.php in cSupport 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pg parameter.
Impact
SQL injection vulnerability in tickets.php in cSupport 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pg parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Forperfect | Csupport | through 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2005/11/csupport-pg-sql-inj.html
- http://www.osvdb.org/21316
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24358
- http://pridels0.blogspot.com/2005/11/csupport-pg-sql-inj.html
- http://www.osvdb.org/21316
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24358