CVE-2003-0874

Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and conduct unauthorized activities via (1) the cat parameter in faq.php, (2) the article parameter in faq.php, (3) the tickedid parameter in view.php, and (4) the Password entry on the logon screen.

• http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0017.html
• http://marc.info/?l=bugtraq&m=106667525623311&w=2
• http://www.securiteam.com/unixfocus/6R0052K8KM.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/bid/8856Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13391
• http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0017.html
• http://marc.info/?l=bugtraq&m=106667525623311&w=2
• http://www.securiteam.com/unixfocus/6R0052K8KM.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/bid/8856Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13391

Published

Nov 17, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0868Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2003-0869Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2003-0870Heap-based buffer overflow in Opera 7.11 and 7.20 allows rem…
• CVE-2003-0871Unknown vulnerability in QuickTime Java in Mac OS X v10.3 an…
• CVE-2003-0872Certain scripts in OpenServer before 5.0.6 allow local users…
• CVE-2003-0873Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2003-0875Symbolic link vulnerability in the slpd script slpd.all_init…
• CVE-2003-0876Finder in Mac OS X 10.2.8 and earlier sets global read/write…
• CVE-2003-0877Mac OS X before 10.3 with core files enabled allows local us…
• CVE-2003-0878slpd daemon in Mac OS X before 10.3 allows local users to ov…
• CVE-2003-0879Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2003-0880Unknown vulnerability in Mac OS X before 10.3 allows local u…