NVD

Id
71762  
Name
CVE-2004-1383  
Description
Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitrary SQL statements via the (1) order, (2) project_id, (3) pro_main, or (4) hours_id parameters to index.php or (5) ticket_id to viewticket_details.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-1383  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
371085 71762 CVE-2004-1383 20041215 Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ]  View
371086 71762 CVE-2004-1383 GLSA-200501-08  View
371087 71762 CVE-2004-1383 http://www.gulftech.org/?node=research&article_id=00054-12142004  View
371088 71762 CVE-2004-1383 11952  View
371089 71762 CVE-2004-1383 phpgroupware-projectid-sql-injection(18498)  View

Related JVN