Lucene search
HistoryJun 09, 2003 - 4:00 a.m.
CVE-2003-0304
cve-2003-0304
one
zero
helpdesk
remote attackers
administrator accounts
install.php
helpdesk installation script
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.7%
one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script.
Affected configurations
Node
oneorzerooneorzero_helpdeskMatch1.4_rc4
| CPE | Name | Operator | Version |
|---|---|---|---|
| oneorzero:oneorzero_helpdesk | oneorzero oneorzero helpdesk | eq | 1.4_rc4 |
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.7%
Related for CVE-2003-0304