← Database

CVE-2009-2604

HIGH CVSS: 7.5 Published: 2009-07-27 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) userid (aka username) and (2) PassWord parameters to admin.asp.

Affected Platforms

Zenhelpdesk Zen Help Desk

Weakness Type

CWE-89

References