Lucene search

[email protected]CVE-2005-1629

HistoryMay 17, 2005 - 4:00 a.m.

CVE-2005-1629

2005-05-1704:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

sql injection

photopost php pro

member.php

security vulnerability

remote attack

8.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.9%

JSON

SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter.

CPENameOperatorVersion
photopost:photopost_php_prophotopost photopost php proeq4.0
photopost:photopost_php_prophotopost photopost php proeq3.1
photopost:photopost_php_prophotopost photopost php proeq4.1
photopost:photopost_php_prophotopost photopost php proeq5.0_rc3
photopost:photopost_php_prophotopost photopost php proeq3.3
photopost:photopost_php_prophotopost photopost php proeq4.6
photopost:photopost_php_prophotopost photopost php proeq4.8.1
photopost:photopost_php_prophotopost photopost php proeq3.2

CPE	Name	Operator	Version
photopost:photopost_php_pro	photopost photopost php pro	eq	4.0
photopost:photopost_php_pro	photopost photopost php pro	eq	3.1
photopost:photopost_php_pro	photopost photopost php pro	eq	4.1
photopost:photopost_php_pro	photopost photopost php pro	eq	5.0_rc3
photopost:photopost_php_pro	photopost photopost php pro	eq	3.3
photopost:photopost_php_pro	photopost photopost php pro	eq	4.6
photopost:photopost_php_pro	photopost photopost php pro	eq	4.8.1
photopost:photopost_php_pro	photopost photopost php pro	eq	3.2

References

seclists.org/lists/fulldisclosure/2005/May/0311.html

www.securityfocus.com/bid/13620

8.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.9%

JSON

Related for CVE-2005-1629

cvelist1 nessus1