CVE-2005-1673

Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to index.php, (2) tid parameter to view.php, fid parameter to (3) download.php or (4) chat_download.php, (5) status parameter to icon.php, TICKET_tid parameter to (6) index.php or (7) view.php.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.12% chance of exploitation in the next 30 days, 66th percentile

Published

2005-05-19

Updated

2024-09-17

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/43814

Security advisories

• http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0

References

• CVE Record
• NVD entry