{"id":"CVE-2002-0932","aliases":["EUVD-2002-0922","GHSA-j9w6-377j-p5fc"],"status":"published","title":"SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions,...","description":"SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the \"id\" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01248,"percentile":0.69527,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2002-08-31T04:00:00Z","modified":"2026-06-16T21:58:24Z","exploits":[{"source":"exploitdb","id":"EDB-21527","title":"MyHelpDesk 20020509 - SQL Injection","type":"webapps","platform":"php","date":"2002-06-10","verified":true,"url":"https://www.exploit-db.com/exploits/21527"}],"products":[{"vendor":"luis_bernardo","product":"myhelpdesk"}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.iss.net/security_center/static/9321.php","tags":["vdb-entry","x_refsource_XF","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4971","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-0932"},{"url":"https://github.com/advisories/GHSA-j9w6-377j-p5fc"}],"sources":{"cve":[{"id":"CVE-2002-0932","description":"SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the \"id\" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.","status":"published","published":"2002-08-31T04:00:00Z","modified":"2024-08-08T03:03:49.348Z","updated_at":"2026-11-02T14:33:55.303902Z"}],"euvd":[{"id":"EUVD-2002-0922","description":"SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the \"id\" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.","status":"published","published":"2002-08-31T04:00:00Z","modified":"2024-08-08T03:03:49Z","updated_at":"2026-11-03T01:14:58.693075Z"}],"ghsa":[{"id":"GHSA-j9w6-377j-p5fc","title":"SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions,...","description":"SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the \"id\" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.","status":"published","published":"2022-04-30T18:20:13Z","modified":"2023-01-30T05:06:14Z","updated_at":"2026-11-02T14:47:27.248528Z"}],"nvd":[{"id":"CVE-2002-0932","description":"SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the \"id\" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.","status":"published","published":"2002-10-04T04:00:00Z","modified":"2026-06-16T21:58:24.737Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:42.827505Z"}]}}