Описание
Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value parameter to the poll module or (2) pId parameter to the gallery module.
Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value parameter to the poll module or (2) pId parameter to the gallery module.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2005-2415
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21482
- http://marc.info/?l=bugtraq&m=112206702015439&w=2
- http://secunia.com/advisories/16169
- http://securitytracker.com/id?1014554
- http://www.hardened-php.net/advisory_112005.59.html
- http://www.osvdb.org/18166
- http://www.osvdb.org/18167
- http://www.securityfocus.com/bid/14352
EPSS
Процентиль: 81%
0.01596
Низкий
CVE ID
Связанные уязвимости
nvd
больше 20 лет назад
Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value parameter to the poll module or (2) pId parameter to the gallery module.
EPSS
Процентиль: 81%
0.01596
Низкий