CVE-2003-0874

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and conduct unauthorized activities via (1) the cat parameter in faq.php, (2) the article parameter in faq.php, (3) the tickedid parameter in view.php, and (4) the Password entry on the logon screen.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0017.html
http://marc.info/?l=bugtraq&m=106667525623311&w=2
http://www.securiteam.com/unixfocus/6R0052K8KM.htmlExploit, Vendor Advisory
http://www.securityfocus.com/bid/8856Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13391
http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0017.html
http://marc.info/?l=bugtraq&m=106667525623311&w=2
http://www.securiteam.com/unixfocus/6R0052K8KM.htmlExploit, Vendor Advisory
http://www.securityfocus.com/bid/8856Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13391

Timeline

Published: Nov 17, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-08752.1Symbolic link vulnerability in the slpd script slpd.all_init for OpenSLP before 1.0.11 allows local users to overwrite arbitrary files via t CVE-2003-08762.1Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounte CVE-2003-08774.6Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on cor CVE-2003-08782.1slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vu CVE-2003-08804.6Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects when Full Keyboard Acce CVE-2003-08817.5Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fail CVE-2003-08825.0Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime vi CVE-2003-08834.6The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an a CVE-2003-08856.4Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecur CVE-2003-088610.0Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.CVE-2003-08872.1ez-ipupdate 3.0.11b7 and earlier creates insecure temporary cache files, which allows local users to conduct unauthorized operations via a s CVE-2003-08944.6Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execut