Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) user parameter in the Login action, and remote authenticated users via the (2) TicketID and (3) ArticleID parameters of the AgentTicketPlain action.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-11-29T21:00:00

Updated: 2024-08-07T23:24:36.605Z

Reserved: 2005-11-29T00:00:00

Link: CVE-2005-3893

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2005-11-29T21:03:00.000

Modified: 2024-11-21T00:02:58.243

Link: CVE-2005-3893

cve-icon Redhat

No data.