Back

CVE-2004-2562

SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Published: Dec 31, 2004 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (36)

Vendor Product Version
leigh_business_enterprises web_helpdesk 1.2_1999-07-00
leigh_business_enterprises web_helpdesk 1.3_2000-07-00
leigh_business_enterprises web_helpdesk 1.4_2000-08-00
leigh_business_enterprises web_helpdesk 4.0.0.33_2001-05-00
leigh_business_enterprises web_helpdesk 4.0.0.35_2001-06-04
leigh_business_enterprises web_helpdesk 4.0.0.38_2001-06-10
leigh_business_enterprises web_helpdesk 4.0.0.40_2001-07-21
leigh_business_enterprises web_helpdesk 4.0.0.41_2001-08-27
leigh_business_enterprises web_helpdesk 4.0.0.43_2001-09-28
leigh_business_enterprises web_helpdesk 4.0.0.50
leigh_business_enterprises web_helpdesk 4.0.0.52
leigh_business_enterprises web_helpdesk 4.0.0.53
leigh_business_enterprises web_helpdesk 4.0.0.54
leigh_business_enterprises web_helpdesk 4.0.0.59
leigh_business_enterprises web_helpdesk 4.0.0.60
leigh_business_enterprises web_helpdesk 4.0.0.61
leigh_business_enterprises web_helpdesk 4.0.0.62
leigh_business_enterprises web_helpdesk 4.0.0.63
leigh_business_enterprises web_helpdesk 4.0.0.64
leigh_business_enterprises web_helpdesk 4.0.0.65

…and 16 more

GitHub Security Advisory GHSA-7fhq-48rw-37c8

SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.35%

Top 31% most likely to be exploited

Threat Score 30.4 / 100

Data Sources

NVD EPSS GitHub