Lucene search

[email protected]CVE-2005-3925

HistoryNov 30, 2005 - 11:03 a.m.

CVE-2005-3925

2005-11-3011:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2005

3925

sql injection

central manchester clc

helpdesk

nvd

9.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.2%

JSON

Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) detail[], (2) orderdir, and (3) orderby parameters to find.php, and the (4) id parameter to issue.php.

CPENameOperatorVersion
helpdesk_issue_manager:helpdesk_issue_managerhelpdesk issue managereq0.2
helpdesk_issue_manager:helpdesk_issue_managerhelpdesk issue managereq0.9
helpdesk_issue_manager:helpdesk_issue_managerhelpdesk issue managereq0.1
helpdesk_issue_manager:helpdesk_issue_managerhelpdesk issue managereq0.7
helpdesk_issue_manager:helpdesk_issue_managerhelpdesk issue managereq0.5
helpdesk_issue_manager:helpdesk_issue_managerhelpdesk issue managereq0.4
helpdesk_issue_manager:helpdesk_issue_managerhelpdesk issue managereq0.3
helpdesk_issue_manager:helpdesk_issue_managerhelpdesk issue managereq0.6
helpdesk_issue_manager:helpdesk_issue_managerhelpdesk issue managereq0.8

CPE	Name	Operator	Version
helpdesk_issue_manager:helpdesk_issue_manager	helpdesk issue manager	eq	0.2
helpdesk_issue_manager:helpdesk_issue_manager	helpdesk issue manager	eq	0.9
helpdesk_issue_manager:helpdesk_issue_manager	helpdesk issue manager	eq	0.1
helpdesk_issue_manager:helpdesk_issue_manager	helpdesk issue manager	eq	0.7
helpdesk_issue_manager:helpdesk_issue_manager	helpdesk issue manager	eq	0.5
helpdesk_issue_manager:helpdesk_issue_manager	helpdesk issue manager	eq	0.4
helpdesk_issue_manager:helpdesk_issue_manager	helpdesk issue manager	eq	0.3
helpdesk_issue_manager:helpdesk_issue_manager	helpdesk issue manager	eq	0.6
helpdesk_issue_manager:helpdesk_issue_manager	helpdesk issue manager	eq	0.8

References

pridels0.blogspot.com/2005/11/helpdesk-issue-manager-v09-sql-inj.html

secunia.com/advisories/17714

www.osvdb.org/21114

www.osvdb.org/21115

www.securityfocus.com/bid/15604

www.vupen.com/english/advisories/2005/2589

9.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.2%

JSON