Lucene search

[email protected]CVE-2005-1567

HistoryMay 14, 2005 - 4:00 a.m.

CVE-2005-1567

2005-05-1404:00:00

[email protected]

web.nvd.nist.gov

sql injection

directtopics

vulnerability

remote execution

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.7%

JSON

SQL injection vulnerability in topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter.

Affected configurations

NVD

Node

directtopicsdirecttopicsMatch2.1

directtopicsdirecttopicsMatch2.2

directtopicsdirecttopicsMatchbeta

directtopicsdirecttopicsMatchfinal

CPENameOperatorVersion
directtopics:directtopicsdirecttopicseq2.1
directtopics:directtopicsdirecttopicseq2.2
directtopics:directtopicsdirecttopicseqbeta
directtopics:directtopicsdirecttopicseqfinal

CPE	Name	Operator	Version
directtopics:directtopics	directtopics	eq	2.1
directtopics:directtopics	directtopics	eq	2.2
directtopics:directtopics	directtopics	eq	beta
directtopics:directtopics	directtopics	eq	final

References

marc.info/?l=bugtraq&m=111592417803514&w=2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.7%

JSON

Related for CVE-2005-1567

cvelist1 nvd1