PT-2004-3453 · Lbe · Lbe Web Helpdesk

CVE-2004-2562

·

Published

2004-12-31

·

Updated

2024-02-14

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions LBE Web Helpdesk versions prior to 4.0.0.81
Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the jobedit.asp file.
Recommendations For versions prior to 4.0.0.81, update to version 4.0.0.81 or later to resolve the issue.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2004-2562

Affected Products

Lbe Web Helpdesk