VulnerabilityModified
CVE-2005-1839
Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.asp or (2) print.asp or (3) edit parameter to register.asp.
HIGH 7.5EPSS 1.32%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.32%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.asp or (2) print.asp or (3) edit parameter to register.asp.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 1.32% probability · 69th percentile
- CISA KEV
- Not listed
- Affected
- liberum/liberum help desk
- Source
- cve@mitre.org
References
- http://echo.or.id/adv/adv14-theday-2005.txtExploit, Vendor Advisory
- http://marc.info/?l=bugtraq&m=111773586701991&w=2
- http://secunia.com/advisories/15593
- http://echo.or.id/adv/adv14-theday-2005.txtExploit, Vendor Advisory
- http://marc.info/?l=bugtraq&m=111773586701991&w=2
- http://secunia.com/advisories/15593
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.