CVE-2003-0303

SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter.

Date published : 2003-05-17

http://www.securityfocus.com/bid/7609

http://marc.info/?l=bugtraq&m=105302025601231&w=2