7.5

CVE-2005-3978

Exploit
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Scriptdevelopers.Net ≫ Netclassifieds Version 1.0.1 Edition free
Scriptdevelopers.Net ≫ Netclassifieds Version 1.0.1 Edition premium
Scriptdevelopers.Net ≫ Netclassifieds Version 1.5.1 Edition professional
Scriptdevelopers.Net ≫ Netclassifieds Version 1.9.6.3 Edition standard
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.73% 0.842
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html
http://secunia.com/advisories/17853
Vendor Advisory
http://www.osvdb.org/21378
Exploit
http://www.osvdb.org/21379
http://www.osvdb.org/21380
http://www.securityfocus.com/bid/15683
Exploit
http://www.vupen.com/english/advisories/2005/2689