CVE

Id
15030  
CVE No.
CVE-2005-3826  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Ezyhelpdesk 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) edit_id, (2) faq_id, and (3) c_id parameters in a query string, and (4) the search engine, possibly involving the search_string parameter.  
Phase
Assigned (20051126)  
Votes
None (candidate not yet proposed)  
Comments