NVD

Id
69531  
Name
CVE-2005-3893  
Description
Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) user parameter in the Login action, and remote authenticated users via the (2) TicketID and (3) ArticleID parameters of the AgentTicketPlain action.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-11-29  
Modified Date
2016-10-17  
Seq
2005-3893  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
359440 69531 CVE-2005-3893 20051122 OTRS 1.x/2.x Multiple Security Issues  View
359441 69531 CVE-2005-3893 20051122 OTRS 1.x/2.x Multiple Security Issues  View
359442 69531 CVE-2005-3893 http://moritz-naumann.com/adv/0007/otrsmulti/0007.txt  View
359443 69531 CVE-2005-3893 http://otrs.org/advisory/OSA-2005-01-en/  View
359444 69531 CVE-2005-3893 1015262  View
359445 69531 CVE-2005-3893 DSA-973  View
359446 69531 CVE-2005-3893 SUSE-SR:2005:030  View
359447 69531 CVE-2005-3893 15537  View
359448 69531 CVE-2005-3893 ADV-2005-2535  View
359449 69531 CVE-2005-3893 otrs-login-sql-injection(23352)  View
359450 69531 CVE-2005-3893 otrs-agentticketplain-sql-injection(23354)  View

Related JVN