CVE-2005-4264

Published: Dec 15, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields, and (3) id parameter.

Affected (1)

Products: Triangle Solutions: Php Support Tickets

Triangle Solutions

1 product

Php Support Tickets

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Triangle Solutions Php Support Tickets	Version 2.0

References (12)

http://secunia.com/advisories/18067

Source: cve@mitre.org

http://securitytracker.com/id?1015352

Source: cve@mitre.org

Patch

http://www.nii.co.in/vuln/PHPSupportTickets.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/21730

Source: cve@mitre.org

http://www.securityfocus.com/bid/15853

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2928

Source: cve@mitre.org

http://secunia.com/advisories/18067