Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Leigh Business Enterprises Web HelpDesk SQL Injection Vulnerability

LBE Web HelpDesk is reported susceptible to an SQL injection vulnerability. This issue is due to improper sanitization of user-supplied data.

This issue may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.

Versions 4.0.0.80 and prior are reported vulnerable to this issue.







 

Privacy Statement
Copyright 2008, SecurityFocus