CVE-2005-4073

Опубликовано: 08 дек. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands via the ListID parameter.

Ссылки

http://pridels0.blogspot.com/2005/12/magic-list-pro-25-sql-inj-vuln.html
http://secunia.com/advisories/17937
Vendor Advisory
http://www.osvdb.org/21504
http://www.securityfocus.com/bid/15774
http://www.vupen.com/english/advisories/2005/2793
Vendor Advisory
http://pridels0.blogspot.com/2005/12/magic-list-pro-25-sql-inj-vuln.html
http://secunia.com/advisories/17937
Vendor Advisory
http://www.osvdb.org/21504
http://www.securityfocus.com/bid/15774
http://www.vupen.com/english/advisories/2005/2793
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cfmagic:magic_list_pro:*:*:*:*:*:*:*:*

Версия до 2.5 (включая)

EPSS

Процентиль: 74%

0.00824

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-r85w-66g6-gv5r

github

почти 4 года назад