7.5
CVE-2005-1364
- EPSS 1.51%
- Veröffentlicht 02.05.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:12:54
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.51% | 0.712 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://digitalparadox.org/advisories/metabid.txt
http://marc.info/?l=bugtraq&m=111454192928364&w=2
http://secunia.com/advisories/15136
http://www.osvdb.org/15868
http://www.osvdb.org/15869
http://www.securityfocus.com/bid/13395
https://exchange.xforce.ibmcloud.com/vulnerabilities/20286