Description
Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.asp or (2) print.asp or (3) edit parameter to register.asp.
References
- http://echo.or.id/adv/adv14-theday-2005.txt
- 20050602 [ECHO_ADV_14$2005] Multiple Vulnerabilities in Liberum Help Desk mailing-list
- 15593 third-party-advisory