Описание
SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dc_xd parameter in a cookie.
SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dc_xd parameter in a cookie.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2005-3963
- http://archives.neohapsis.com/archives/fulldisclosure/2005-11/1052.html
- http://secunia.com/advisories/17830
- http://www.dotclear.net/forum/viewtopic.php?id=13876
- http://www.osvdb.org/21333
- http://www.securityfocus.com/bid/15667
- http://www.vupen.com/english/advisories/2005/2677
- http://www.zone-h.org/advisories/read/id=8485
EPSS
Процентиль: 76%
0.00923
Низкий
CVE ID
Связанные уязвимости
nvd
около 20 лет назад
SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dc_xd parameter in a cookie.
EPSS
Процентиль: 76%
0.00923
Низкий