Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0646
sql injection
auth.php
panews 2.0.4b
remote attackers
nvd
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
55.5%
SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| php_arena:panews | php arena panews | eq | 2.0.4b |
Related
cvelist
cvelist
CVE-2005-0646
2005-03-04 05:00:00
nessus
nessus
paNews 2.0.4b Multiple Input Validation Vulnerabilities
2005-03-18 00:00:00
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
55.5%
Related for CVE-2005-0646