PT-2007-6849 · Php · Phphelpdesk

Joseph · Publicado 2007-11-10 · Atualizado 2018-10-15 · CVE-2007-5916

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phphelpdesk version 0.6.16

Description A SQL injection issue exists in the login page, allowing remote attackers to execute arbitrary SQL commands. This is related to the login procedures, though specific parameters are not specified.

Recommendations For phphelpdesk version 0.6.16, update to a newer version that contains a fix for this issue, as using outdated software can pose significant security risks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2007-5916

Produtos afetados

Phphelpdesk

Referências · 5

• http://securityreason.com/securityalert/3359 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5916 · Nota de Segurança
• http://securityfocus.com/bid/26319 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38260 · Nota
• http://securityfocus.com/archive/1/483256/100/0/threaded · Nota