CVE-2005-4264 Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields, and (3) id paramet...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields, and (3) id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| triangle solutions php support tickets | = 2.0 | No fix listed |
References
- 18067 third-party-advisory
- 1015352 patch vdb-entry
- www.nii.co.in patch vendor-advisory
- 21730 vdb-entry
- 15853 vdb-entry
- ADV-2005-2928 vdb-entry