CVE-2004-2562

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

Leigh Business Enterprises Web Helpdesk: 1.2_1999-07-00, 1.3_2000-07-00, 1.4_2000-08-00, 4.0.0.33_2001-05-00, 4.0.0.35_2001-06-04, 4.0.0.38_2001-06-10 (+30)

References

http://secunia.com/advisories/12123
http://www.lbehelpdesk.com/patch/web/history.txt
http://www.osvdb.org/8181
http://www.securiteam.com/windowsntfocus/5QP0M0ADGI.html
http://www.securityfocus.com/bid/10773
https://exchange.xforce.ibmcloud.com/vulnerabilities/16779
http://secunia.com/advisories/12123
http://www.lbehelpdesk.com/patch/web/history.txt
http://www.osvdb.org/8181
http://www.securiteam.com/windowsntfocus/5QP0M0ADGI.html
http://www.securityfocus.com/bid/10773
https://exchange.xforce.ibmcloud.com/vulnerabilities/16779

Get alerted when CVE-2004-2562 or the next vulnerability affects your stack