7.5

CVE-2005-4554

Exploit
Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in an openforum action (openforum.php) in index.php, (2) cat parameter in getfile.php, and (3) target parameter in download_now.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.85% 0.888
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://rgod.altervista.org/dev_15_sql_xpl.html
Exploit
http://secunia.com/advisories/18239
Vendor Advisory
Exploit
http://securitytracker.com/id?1015410
Exploit
http://www.osvdb.org/22040
http://www.osvdb.org/22041
http://www.osvdb.org/22042
http://www.securityfocus.com/archive/1/420253/100/0/threaded
http://www.securityfocus.com/bid/16063
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/23898