Lucene search
HistoryMay 04, 2005 - 4:00 a.m.
CVE-2005-0676
zorum
3.5
index.php
sql injection
vulnerability
7.4 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.2%
index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability.
Affected configurations
Node
phpoutsourcingzorumMatch3.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpoutsourcing:zorum | phpoutsourcing zorum | eq | 3.5 |
References
Related
cvelist
cvelist
CVE-2005-0676
2005-03-07 05:00:00
nvd
nvd
CVE-2005-0676
2005-05-04 04:00:00
nessus
nessus
Zorum <= 3.5 Multiple Remote Vulnerabilities
2005-03-11 00:00:00
7.4 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.2%
Related for CVE-2005-0676