CVEvulnerability
CVE-2005-4264
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields, and (3) id parameter.
Affected configurations
• triangle solutions php support tickets 2.0
References
- http://secunia.com/advisories/18067 secunia.com
- http://securitytracker.com/id?1015352 Patch
- http://www.nii.co.in/vuln/PHPSupportTickets.html Patch, Vendor Advisory
- http://www.osvdb.org/21730 www.osvdb.org
- http://www.securityfocus.com/bid/15853 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2928 www.vupen.com
- http://secunia.com/advisories/18067 secunia.com
- http://securitytracker.com/id?1015352 Patch
- http://www.nii.co.in/vuln/PHPSupportTickets.html Patch, Vendor Advisory
- http://www.osvdb.org/21730 www.osvdb.org
- http://www.securityfocus.com/bid/15853 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2928 www.vupen.com