Vulnerabilities > Helpdesk Issue Manager > Helpdesk Issue Manager > 0.4

DATE	CVE	VULNERABILITY TITLE	RISK
2005-11-30	CVE-2005-3925	SQL Injection vulnerability in Helpdesk Issue Manager Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) detail[], (2) orderdir, and (3) orderby parameters to find.php, and the (4) id parameter to issue.php. network low complexity helpdesk-issue-manager	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.