Description
SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
References
- 20060815 OneOrZero Helpdesk V1.6.4.1 susceptible to SQL injection and XSS mailing-list
- 1448 third-party-advisory
- 1460 third-party-advisory