CVE-2013-4945

no score yetEPSS 1.1%

bmc service desk express: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to execute arbitrary SQL commands via the (1) ASPSESSIONIDASSRATTQ, (2) TABLE_WIDGET_1, (3) TABLE_WIDGET_2, (4) browserDateTimeInfo, or (5) browserNumberInfo cookie parameter to DashBoardGUI.aspx; or the (6) UID parameter to login.aspx.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2013-07-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

bmc:service_desk_express

References

http://archives.neohapsis.com/archives/bugtraq/2013-07/0082.html
http://www.exploit-db.com/exploits/26806
http://www.securityfocus.com/bid/61147
http://archives.neohapsis.com/archives/bugtraq/2013-07/0082.html
http://www.exploit-db.com/exploits/26806

Check your stack JSON