CVE-2004-1498

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter.

Affected (10)

Products: Webhost Automation: Helm Control Panel

Webhost Automation

1 product

Helm Control Panel

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Webhost Automation Helm Control Panel	Version 3.1.10
Webhost Automation Helm Control Panel	Version 3.1.11
Webhost Automation Helm Control Panel	Version 3.1.12
Webhost Automation Helm Control Panel	Version 3.1.13
Webhost Automation Helm Control Panel	Version 3.1.14
Webhost Automation Helm Control Panel	Version 3.1.15
Webhost Automation Helm Control Panel	Version 3.1.16
Webhost Automation Helm Control Panel	Version 3.1.17
Webhost Automation Helm Control Panel	Version 3.1.18
Webhost Automation Helm Control Panel	Version 3.1.19