SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Web_helpdesk | Leigh_business_enterprises | 1.2_1999-07-00 (including) | 1.2_1999-07-00 (including) |
| Web_helpdesk | Leigh_business_enterprises | 1.3_2000-07-00 (including) | 1.3_2000-07-00 (including) |
| Web_helpdesk | Leigh_business_enterprises | 1.4_2000-08-00 (including) | 1.4_2000-08-00 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.33_2001-05-00 (including) | 4.0.0.33_2001-05-00 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.35_2001-06-04 (including) | 4.0.0.35_2001-06-04 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.38_2001-06-10 (including) | 4.0.0.38_2001-06-10 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.40_2001-07-21 (including) | 4.0.0.40_2001-07-21 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.41_2001-08-27 (including) | 4.0.0.41_2001-08-27 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.43_2001-09-28 (including) | 4.0.0.43_2001-09-28 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.50 (including) | 4.0.0.50 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.52 (including) | 4.0.0.52 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.53 (including) | 4.0.0.53 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.54 (including) | 4.0.0.54 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.59 (including) | 4.0.0.59 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.60 (including) | 4.0.0.60 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.61 (including) | 4.0.0.61 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.62 (including) | 4.0.0.62 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.63 (including) | 4.0.0.63 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.64 (including) | 4.0.0.64 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.65 (including) | 4.0.0.65 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.66 (including) | 4.0.0.66 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.67 (including) | 4.0.0.67 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.68 (including) | 4.0.0.68 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.69 (including) | 4.0.0.69 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.70 (including) | 4.0.0.70 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.71 (including) | 4.0.0.71 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.72 (including) | 4.0.0.72 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.73 (including) | 4.0.0.73 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.74 (including) | 4.0.0.74 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.75 (including) | 4.0.0.75 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.76 (including) | 4.0.0.76 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.77 (including) | 4.0.0.77 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.78 (including) | 4.0.0.78 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.79 (including) | 4.0.0.79 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0.0.80 (including) | 4.0.0.80 (including) |
| Web_helpdesk | Leigh_business_enterprises | 4.0_2001-03-00 (including) | 4.0_2001-03-00 (including) |
References
- http://secunia.com/advisories/12123
- http://www.lbehelpdesk.com/patch/web/history.txt
- http://www.osvdb.org/8181
- http://www.securiteam.com/windowsntfocus/5QP0M0ADGI.html
- http://www.securityfocus.com/bid/10773
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16779
- http://secunia.com/advisories/12123
- http://www.lbehelpdesk.com/patch/web/history.txt
- http://www.osvdb.org/8181
- http://www.securiteam.com/windowsntfocus/5QP0M0ADGI.html
- http://www.securityfocus.com/bid/10773
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16779