7.5
CVE-2005-4390
- EPSS 1.12%
- Veröffentlicht 20.12.2005 11:03:00
- Zuletzt bearbeitet 16.06.2026 22:18:42
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the StoryID parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Contentserv ≫ Contentserv Version <= 3.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.12% | 0.619 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://pridels0.blogspot.com/2005/12/contentserv-31-sql-inj.html
http://www.osvdb.org/21851
http://www.securityfocus.com/bid/15956
http://www.vupen.com/english/advisories/2005/2982
https://exchange.xforce.ibmcloud.com/vulnerabilities/23825