CVE-2003-0303: Oneorzero Helpdesk

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter.

Affected products

• Oneorzero Oneorzero Helpdesk: version 1.4_rc4 only

Published 2003-06-09. Last modified 2026-06-16.