CVE-2002-0932 EXPLOIT
6.4
MEDIUM · CVSS 2.0 · EPSS 1.2% (pctl 68)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.
Scoring
| CVSS | 6.4 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:N |
| EPSS | 1.25% — more likely to be exploited than 68% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2002-10-04 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| luis bernardo | myhelpdesk |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | MyHelpDesk 20020509 - SQL Injection | 2002-06-10 |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html
- http://www.iss.net/security_center/static/9321.php
- http://www.securityfocus.com/bid/4971
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html
- http://www.iss.net/security_center/static/9321.php
- http://www.securityfocus.com/bid/4971
→ the Explorer · watch your stack · NVD