CVE-2002-0932

SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.

CVSS v2.0 NVD

6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

1.25% chance of exploitation in the next 30 days, 69th percentile

Published

2002-08-31

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21527

Security advisories

• http://www.iss.net/security_center/static/9321.php
• http://www.securityfocus.com/bid/4971

References

• CVE Record
• NVD entry