Description
Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- http://sourceforge.net/forum/forum.php?forum_id=731460
- phdhelpdesk-unspecified-sql-injection(36431) vdb-entry
- 26688 third-party-advisory
- 36789 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=536503
- ADV-2007-3039 vdb-entry
- 25517 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=536503&group_id=170208