CGI abuses : OneOrZero SQL injection

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.11643

Category: CGI abuses

Title: OneOrZero SQL injection

Summary: NOSUMMARY

Description: Description:

The remote host is running OneOrZero, an online helpdesk.

There are multiple flaws in this software which may allow an attacker
to insert arbitrary SQL commands in the remote database, or even
to gain administrative privileges on this host.

Solution : Unofficial patches are available at http://www.phpsecure.info
Risk factor : High

Cross-Ref: BugTraq ID: 7609
BugTraq ID: 7611

Copyright This script is Copyright (C) 2003 Tenable Network Security

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.11643
Category:	CGI abuses
Title:	OneOrZero SQL injection
Summary:	NOSUMMARY
Description:	Description: The remote host is running OneOrZero, an online helpdesk. There are multiple flaws in this software which may allow an attacker to insert arbitrary SQL commands in the remote database, or even to gain administrative privileges on this host. Solution : Unofficial patches are available at http://www.phpsecure.info Risk factor : High
Cross-Ref:	BugTraq ID: 7609 BugTraq ID: 7611
Copyright	This script is Copyright (C) 2003 Tenable Network Security