CVE-2002-0932
Last modified
CVE-2002-0932 is a vulnerability of currently unknown severity. SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.. EPSS estimates a 1.25% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Luis Bernardo | Myhelpdesk | <= 2002-05-09 |
References
- http://www.iss.net/security_center/static/9321.phpVendor Advisory
- http://www.securityfocus.com/bid/4971Exploit, Vendor Advisory
- http://www.iss.net/security_center/static/9321.phpVendor Advisory
- http://www.securityfocus.com/bid/4971Exploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2002-0932?
How severe is CVE-2002-0932?
How do I fix CVE-2002-0932?
Are you affected by CVE-2002-0932?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
