Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-1364
security
sql injection
metabid auctions
cve-2005-1364
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
9.1 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.5%
Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp.
Affected configurations
Node
metalinksmetabid_auctions
| CPE | Name | Operator | Version |
|---|---|---|---|
| metalinks:metabid_auctions | metalinks metabid auctions | eq | * |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
9.1 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.5%
Related for CVE-2005-1364