CVE-2005-3838 Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) lorder, (2) Priority, (3) Status, (...
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) lorder, (2) Priority, (3) Status, (4) Category, (5) searchvalue, and (6) field parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isolsoft support center | = 2.2 | No fix listed |
References
- pridels0.blogspot.com
- 17728 third-party-advisory vendor-advisory
- 1015270 exploit vdb-entry
- 21102 vdb-entry
- 15570 exploit vdb-entry
- ADV-2005-2592 vdb-entry