CVE-2003-0303

Description

SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2003-0298

http://www.securityfocus.com/bid/7609

http://marc.info/?l=bugtraq&m=105302025601231&w=2

http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS