7.5
CVE-2005-0302
- EPSS 1.33%
- Veröffentlicht 02.05.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:10:52
- Erkennungen
LoginSQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Comersus Open Technologies ≫ Comersus Backoffice Lite Version 6.0
Comersus Open Technologies ≫ Comersus Backoffice Lite Version 6.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.33% | 0.674 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://marc.info/?l=bugtraq&m=110636597832556&w=2
http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/19013