CVE-2005-0474

Опубликовано: 30 мар. 2005

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers to execute arbitrary SQL commands via an encoded webcalendar_session cookie.

Ссылки

http://marc.info/?l=bugtraq&m=110868446431706&w=2
http://secunia.com/advisories/14319
Patch
Vendor Advisory
http://securitytracker.com/id?1013231
http://www.osvdb.org/13918
http://www.scovettalabs.com/advisory/SCL-2005.001.txt
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19369
http://marc.info/?l=bugtraq&m=110868446431706&w=2
http://secunia.com/advisories/14319
Patch
Vendor Advisory
http://securitytracker.com/id?1013231
http://www.osvdb.org/13918
http://www.scovettalabs.com/advisory/SCL-2005.001.txt
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19369

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:webcalendar:webcalendar:0.9.45:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.01442

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-0474

ubuntu

больше 21 года назад

SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers to execute arbitrary SQL commands via an encoded webcalendar_session cookie.

CVE-2005-0474

debian

больше 21 года назад

SQL injection vulnerability in the user_valid_crypt function in user.p ...

GHSA-4mmm-jj36-wmc5

github

больше 4 лет назад

SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers to execute arbitrary SQL commands via an encoded webcalendar_session cookie.

EPSS

Процентиль: 71%

0.01442

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other