返回 CVE 浏览器

CVE-2003-0304

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0190%

EPSS Percentile17.23th

Published2003年6月9日

Last Modified2026年4月16日

Vulnerability Description

one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script.

Affected Platforms (CPE)

📦

Oneorzero

Oneorzero Helpdesk

= 1.4_rc4

References & Advisories

🔗 http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html

🔗 http://marc.info/?l=bugtraq&m=105302025601231&w=2

🔗 http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html

🔗 http://marc.info/?l=bugtraq&m=105302025601231&w=2

相关漏洞威胁

CVE-2006-54747.5

The "forgot password" function in OneOrZero Helpdesk before 1.6.5.4 generates insecure passwords by concatenating the current time...

CVE-2009-08865.0

Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary...

CVE-2007-57274.3

Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, and possibly...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...