7.5
CVE-2005-1750
- EPSS 1.33%
- Veröffentlicht 25.05.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:13:37
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Distinct Web Creations ≫ Newsletterez Version3.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.33% | 0.674 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/15469
http://securitytracker.com/id?1014038
http://www.securityfocus.com/bid/13730
http://www.under9round.com/nez.txt