Lucene search

[email protected]CVE-2005-2012

HistoryJun 20, 2005 - 4:00 a.m.

CVE-2005-2012

2005-06-2004:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-2012

sql injection

pafaq 1.0 beta 4

remote attackers

authentication bypass

9.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.7%

JSON

Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) id parameters.

CPENameOperatorVersion
php_arena:pafaqphp arena pafaqeq1.0_beta_4

CPE	Name	Operator	Version
php_arena:pafaq	php arena pafaq	eq	1.0_beta_4

References

marc.info/?l=bugtraq&m=111928841328681&w=2

www.gulftech.org/?node=research&article_id=00083-06202005

9.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.7%

JSON

Related for CVE-2005-2012

nessus1