CVE

Id
15097  
CVE No.
CVE-2005-3893  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) user parameter in the Login action, and remote authenticated users via the (2) TicketID and (3) ArticleID parameters of the AgentTicketPlain action.  
Phase
Assigned (20051129)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
117527 15097 CVE-2005-3893 BUGTRAQ:20051122 OTRS 1.x/2.x Multiple Security Issues  View
117528 15097 CVE-2005-3893 URL:http://marc.info/?l=bugtraq&m=113272360804853&w=2  View
117529 15097 CVE-2005-3893 FULLDISC:20051122 OTRS 1.x/2.x Multiple Security Issues  View
117530 15097 CVE-2005-3893 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.html  View
117531 15097 CVE-2005-3893 MISC:http://moritz-naumann.com/adv/0007/otrsmulti/0007.txt  View
117532 15097 CVE-2005-3893 CONFIRM:http://otrs.org/advisory/OSA-2005-01-en/  View
117533 15097 CVE-2005-3893 DEBIAN:DSA-973  View
117534 15097 CVE-2005-3893 URL:http://www.debian.org/security/2006/dsa-973  View
117535 15097 CVE-2005-3893 SUSE:SUSE-SR:2005:030  View
117536 15097 CVE-2005-3893 URL:http://www.novell.com/linux/security/advisories/2005_30_sr.html  View
117537 15097 CVE-2005-3893 BID:15537  View
117538 15097 CVE-2005-3893 URL:http://www.securityfocus.com/bid/15537/  View
117539 15097 CVE-2005-3893 VUPEN:ADV-2005-2535  View
117540 15097 CVE-2005-3893 URL:http://www.vupen.com/english/advisories/2005/2535  View
117541 15097 CVE-2005-3893 OSVDB:21064  View
117542 15097 CVE-2005-3893 URL:http://www.osvdb.org/21064  View
117543 15097 CVE-2005-3893 OSVDB:21065  View
117544 15097 CVE-2005-3893 URL:http://www.osvdb.org/21065  View
117545 15097 CVE-2005-3893 SECTRACK:1015262  View
117546 15097 CVE-2005-3893 URL:http://securitytracker.com/id?1015262  View
117547 15097 CVE-2005-3893 SECUNIA:17685  View
117548 15097 CVE-2005-3893 URL:http://secunia.com/advisories/17685/  View
117549 15097 CVE-2005-3893 SECUNIA:18101  View
117550 15097 CVE-2005-3893 URL:http://secunia.com/advisories/18101  View
117551 15097 CVE-2005-3893 SECUNIA:18887  View
117552 15097 CVE-2005-3893 URL:http://secunia.com/advisories/18887  View
117553 15097 CVE-2005-3893 XF:otrs-agentticketplain-sql-injection(23354)  View
117554 15097 CVE-2005-3893 URL:http://xforce.iss.net/xforce/xfdb/23354  View
117555 15097 CVE-2005-3893 XF:otrs-login-sql-injection(23352)  View

Related JVN