7.5
CVE-2005-3509
- EPSS 1.17%
- Veröffentlicht 06.11.2005 11:02:00
- Zuletzt bearbeitet 16.06.2026 22:17:05
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL commands via (1) banner.php or the id parameter to (2) print.php, (3) comment.php, and (4) news.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Jportal ≫ Jportal Web Portal Version2.2.1
Jportal ≫ Jportal Web Portal Version2.3.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.17% | 0.634 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://foro.elhacker.net/index.php?topic=93436.0
http://www.security.nnov.ru/Kdocument105.html
http://www.securityfocus.com/bid/15324
http://www.vupen.com/english/advisories/2005/2310