CVE-2013-4717

CVE-2013-4717 describes multiple SQL injection vulnerabilities affecting Open Ticket Request System (OTRS) Help Desk versions 3.0.x, 3.1.x, and 3.2.x. Specifically, versions prior to 3.0.22, 3.1.18, and 3.2.9 are vulnerable. This flaw allows remote authenticated users to execute arbitrary SQL commands through various unspecified vectors within several OTRS modules. The vulnerability carries a CVSS score of 8.8 (High), indicating a significant risk. It can be exploited over the network with low attack complexity, requiring only low privileges to achieve high impacts on confidentiality, integrity, and availability. The underlying weakness is CWE-89, Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'). Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, suggesting a lack of widespread attention or active threat.