Description
Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
References
- 19776 third-party-advisory
- ADV-2006-1492 vdb-entry
- 17676 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=411859
- helpcenterlive-osticket-sql-injection(26040) vdb-entry