CVE-2005-4430 Information

Description

SQL injection vulnerability in LogicBill 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) __mode and (2) __id parameters to helpdesk.php.

Reference

http://pridels0.blogspot.com/2005/11/logicbill-10-sql-inj.html http://www.osvdb.org/21368 http://www.securityfocus.com/bid/16132