Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0368
cmscore
sql injection
vulnerability
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.1%
Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) EntryID or (2) searchterm parameter to index.php, or (3) username parameter to authenticate.php.
Affected configurations
Node
chipmunk_scriptscmscore
| CPE | Name | Operator | Version |
|---|---|---|---|
| chipmunk_scripts:cmscore | chipmunk scripts cmscore | eq | * |
Related
nessus
nessus
Chipmunk CMScore Multiple Script SQL Injection
2005-02-08 00:00:00
cvelist
cvelist
CVE-2005-0368
2005-02-11 05:00:00
nvd
nvd
CVE-2005-0368
2005-05-02 04:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.1%
Related for CVE-2005-0368