Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-1804
npds
sql injection
security
cve-2005-1804
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.7%
Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.php) or (2) query parameter to links.php.
Affected configurations
Node
net_portal_dynamic_systemnet_portal_dynamic_systemMatch5.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| net_portal_dynamic_system:net_portal_dynamic_system | net portal dynamic system | eq | 5.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.7%
Related for CVE-2005-1804