cpe:/a:phd:help_desk:1.3 CVE-2007-4716 2007-09-05T15:17:00.000-04:00 2017-07-28T21:33:08.270-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2007-09-06T10:11:00.000-04:00 BID 25517 SECUNIA 26688 OSVDB 36789 VUPEN ADV-2007-3039 CONFIRM http://sourceforge.net/forum/forum.php?forum_id=731460 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=536503 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=536503&group_id=170208 XF phdhelpdesk-unspecified-sql-injection(36431) Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.