CVE-2005-1437 - Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admin.php or (2) cat parameter to view.php

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admin.php or (2) cat parameter to view.php

Published May 3, 2005

7.5

HIGH

CVSS 2.0

EPSS 1.32%

Description

Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admin.php or (2) cat parameter to view.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://secunia.com/advisories/15216
third-party-advisoryx_refsource_SECUNIAExploit
http://www.gulftech.org/?node=research&article_id=00071-05022005
x_refsource_MISCExploit
http://www.osvdb.org/16277
vdb-entryx_refsource_OSVDB

Link	Providers	Tags
http://secunia.com/advisories/15216		third-party-advisoryx_refsource_SECUNIAExploit
http://www.gulftech.org/?node=research&article_id=00071-05022005		x_refsource_MISCExploit
http://www.osvdb.org/16277		vdb-entryx_refsource_OSVDB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 3, 2005

Updated Aug 7, 2024

Reserved May 3, 2005

Link CVE-2005-1437

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2005-1437

Red Hat

Severity n/a

Public date n/a

Links CVE-2005-1437