CVE-2004-2562

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/12123Patch, Vendor Advisory
http://www.lbehelpdesk.com/patch/web/history.txtURL Repurposed
http://www.osvdb.org/8181
http://www.securiteam.com/windowsntfocus/5QP0M0ADGI.htmlExploit, Patch
http://www.securityfocus.com/bid/10773Exploit, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16779
http://secunia.com/advisories/12123Patch, Vendor Advisory
http://www.lbehelpdesk.com/patch/web/history.txtURL Repurposed
http://www.osvdb.org/8181
http://www.securiteam.com/windowsntfocus/5QP0M0ADGI.htmlExploit, Patch
http://www.securityfocus.com/bid/10773Exploit, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16779

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-25635.8Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and database information, and c CVE-2004-25644.3Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remo CVE-2004-25655.0Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, when the administ CVE-2004-25664.3Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (2) LiveQ&A, (3) LiveChat, and CVE-2004-25677.5Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) user id, (2) CVE-2004-25684.3Multiple cross-site scripting (XSS) vulnerabilities in ReciPants 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the CVE-2004-25692.1ipmenu 0.0.3 before Debian GNU/Linux ipmenu_0.0.3-5 allows local users to overwrite arbitrary files via a symlink attack on the ipmenu.log t CVE-2004-25705.0Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript to read arbitrary f CVE-2004-25717.5Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via the (1) parseQmailFromBytesLine, (CVE-2004-25725.0AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering (1) invalid characters such as "()" or (2)CVE-2004-25737.5PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to execute a CVE-2004-25744.3Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to inject arbitrary web