Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-1412
cve-2005-1412
sql injection
ecomm professional
guestbook
remote attackers
adminpwd parameter
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.6%
SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter.
Affected configurations
Node
ecommprofessional_guestbookMatch3
| CPE | Name | Operator | Version |
|---|---|---|---|
| ecomm:professional_guestbook | ecomm professional guestbook | eq | 3 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.6%
Related for CVE-2005-1412