Unscored severity · published Oct 4, 2002
CVE-2002-0932
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id"…
–
CVSS
1.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
Myhelpdesk · Luis Bernardo
through 2002-05-09 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0932
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0932
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html
Vendor Advisory
http://www.iss.net/security_center/static/9321.php
Exploit
http://www.securityfocus.com/bid/4971
More from Myhelpdesk
–
CVE-2002-0931
Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2)…