Unscored CVE-2004-1498 EUVD-2004-1492GHSA-m55m-3w7q-px94

SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL command…

Published Feb 19, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter.

References

13079 third-party-advisory
20041102 [Hat-Squad] SQL injection and XSS Vulnerabilities in HELM mailing-list
http://www.hat-squad.com/en/000077.html
11586 vdb-entry