CVE-2005-4370

Опубликовано: 20 дек. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter to default.asp.

Ссылки

http://hamid.ir/security/acidcat.txt
Exploit
Vendor Advisory
http://secunia.com/advisories/18097
Vendor Advisory
http://www.osvdb.org/21845
http://www.securityfocus.com/archive/1/419905/100/0/threaded
http://www.securityfocus.com/bid/15933
https://exchange.xforce.ibmcloud.com/vulnerabilities/23870
http://hamid.ir/security/acidcat.txt
Exploit
Vendor Advisory
http://secunia.com/advisories/18097
Vendor Advisory
http://www.osvdb.org/21845
http://www.securityfocus.com/archive/1/419905/100/0/threaded
http://www.securityfocus.com/bid/15933
https://exchange.xforce.ibmcloud.com/vulnerabilities/23870

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:acidcat:acidcat:2.1.11:*:*:*:*:*:*:*

cpe:2.3:a:acidcat:acidcat:2.1.12:*:*:*:*:*:*:*

cpe:2.3:a:acidcat:acidcat:2.1.13:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00799

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-8cx9-qhmg-8ch6

github

почти 4 года назад