7.5
CVE-2005-4038
- EPSS 1.33%
- Veröffentlicht 06.12.2005 11:03:00
- Zuletzt bearbeitet 16.06.2026 22:18:06
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attackers to execute arbitrary SQL commands via the idp parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.33% | 0.674 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://pridels0.blogspot.com/2005/12/web4future-portal-solutions-news.html
http://secunia.com/advisories/17880
http://www.osvdb.org/21422
http://www.securityfocus.com/bid/15716
http://www.vupen.com/english/advisories/2005/2733
https://exchange.xforce.ibmcloud.com/vulnerabilities/23419