CVE-2003-0874 | BDVDB-2026-5949 Detail

Description#

Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and conduct unauthorized activities via (1) the cat parameter in faq.php, (2) the article parameter in faq.php, (3) the tickedid parameter in view.php, and (4) the Password entry on the logon screen.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/13391
http://marc.info/?l=bugtraq&m=106667525623311&w=2
http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0017.html
http://www.securityfocus.com/bid/8856
http://www.securiteam.com/unixfocus/6R0052K8KM.html

Exploit#

No public exploit known

History#

Version 12003-10-25Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.