CVE-2007-5916 SQL injection vulnerability in the login page in phphelpdesk 0.6.16 allows remote attackers to execute arbitrary SQL commands via unspecified parameters related to the "login procedures."
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the login page in phphelpdesk 0.6.16 allows remote attackers to execute arbitrary SQL commands via unspecified parameters related to the "login procedures."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phphelpdesk | = 0.6.16 | No fix listed |
References
- 3359 third-party-advisory
- 20071102 phphelpdesk Multiple vulnerabilities mailing-list
- 26319 vdb-entry
- phphelpdesk-login-sql-injection(38260) vdb-entry