CVE-2005-3925

Published: Nov 30, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) detail[], (2) orderdir, and (3) orderby parameters to find.php, and the (4) id parameter to issue.php.

Affected (9)

Products: Helpdesk Issue Manager: Helpdesk Issue Manager

Helpdesk Issue Manager

1 product

Helpdesk Issue Manager

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Helpdesk Issue Manager Helpdesk Issue Manager	Version 0.1
Helpdesk Issue Manager Helpdesk Issue Manager	Version 0.2
Helpdesk Issue Manager Helpdesk Issue Manager	Version 0.3
Helpdesk Issue Manager Helpdesk Issue Manager	Version 0.4
Helpdesk Issue Manager Helpdesk Issue Manager	Version 0.5
Helpdesk Issue Manager Helpdesk Issue Manager	Version 0.6
Helpdesk Issue Manager Helpdesk Issue Manager	Version 0.7
Helpdesk Issue Manager Helpdesk Issue Manager	Version 0.8
Helpdesk Issue Manager Helpdesk Issue Manager	Version 0.9