CVE:CVE-2005-3925
CNNVD:CNNVD-200511-486
Helpdesk Issue Manager是一个基于PHP和PostgreSQL的开源的桌面管理软件。
Central Manchester CLC Helpdesk Issue Manager 0.9及更早版本存在多个SQL注入漏洞，可让远程攻击者通过find.php的(1) detail[]、(2) orderdir和(3) orderby参数以及(4) issue.php的id参数执行任意SQL命令。
solution:Upgrade helpdesk_issue_manager helpdesk_issue_manager to a higher version than 0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,and avoid the version 0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9