Lucene search

[email protected]CVE-2005-1128

HistoryOct 03, 2022 - 4:22 p.m.

CVE-2005-1128

2022-10-0316:22:41

[email protected]

web.nvd.nist.gov

sql injection

vhcs

remote attackers

http post queries

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.1%

JSON

Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via certain inputs from HTTP POST queries.

Affected configurations

NVD

Node

virtual_hosting_control_systemvirtual_hosting_control_systemRange≤2.4

virtual_hosting_control_systemvirtual_hosting_control_systemMatch2.2

CPENameOperatorVersion
virtual_hosting_control_system:virtual_hosting_control_systemvirtual hosting control systemle2.4
virtual_hosting_control_system:virtual_hosting_control_systemvirtual hosting control systemeq2.2

CPE	Name	Operator	Version
virtual_hosting_control_system:virtual_hosting_control_system	virtual hosting control system	le	2.4
virtual_hosting_control_system:virtual_hosting_control_system	virtual hosting control system	eq	2.2

References

securitytracker.com/id?1013703

www.osvdb.org/15541

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.1%

JSON

Related for CVE-2005-1128

cvelist1 nvd1