7.5

CVE-2005-4065

Exploit
SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Edgewall Software ≫ Trac Version0.7.1
Edgewall Software ≫ Trac Version0.8.1
Edgewall Software ≫ Trac Version0.8.3
Edgewall Software ≫ Trac Version0.8.4
Edgewall Software ≫ Trac Version0.9
Edgewall Software ≫ Trac Version0.9.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.98% 0.891
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://projects.edgewall.com/trac/wiki/ChangeLog
http://lists.edgewall.com/archive/trac/2005-December/005777.html
Patch
http://secunia.com/advisories/17894
Patch
Vendor Advisory
http://secunia.com/advisories/18555
http://securityreason.com/securityalert/222
http://www.debian.org/security/2006/dsa-951
http://www.osvdb.org/21459
http://www.securityfocus.com/bid/15720
Patch
Exploit
http://www.vupen.com/english/advisories/2005/2766