CVE-2003-0874

Published: Nov 17, 2003Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and conduct unauthorized activities via (1) the cat parameter in faq.php, (2) the article parameter in faq.php, (3) the tickedid parameter in view.php, and (4) the Password entry on the logon screen.

Affected (1)

Products: Deskpro: Deskpro

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Deskpro Deskpro	Version 1.1_.0

References (10)

http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0017.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=106667525623311&w=2

Source: cve@mitre.org

http://www.securiteam.com/unixfocus/6R0052K8KM.html

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/8856

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/13391

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0017.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=106667525623311&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securiteam.com/unixfocus/6R0052K8KM.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/bid/8856

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/13391

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.