7.5

CVE-2005-3978

Exploit
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Scriptdevelopers.Net ≫ Netclassifieds Version1.0.1 Editionfree
Scriptdevelopers.Net ≫ Netclassifieds Version1.0.1 Editionpremium
Scriptdevelopers.Net ≫ Netclassifieds Version1.5.1 Editionprofessional
Scriptdevelopers.Net ≫ Netclassifieds Version1.9.6.3 Editionstandard
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.73% 0.842
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html
http://secunia.com/advisories/17853
Vendor Advisory
http://www.osvdb.org/21378
Exploit
http://www.osvdb.org/21379
http://www.osvdb.org/21380
http://www.securityfocus.com/bid/15683
Exploit
http://www.vupen.com/english/advisories/2005/2689