Lucene search
HistoryJul 26, 2005 - 4:00 a.m.
CVE-2005-2383
sql injection
phpnews
user parameter
security vulnerability
nvd
8.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.0%
SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request.
Affected configurations
Node
phpnewsphpnewsMatch1.2.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpnews:phpnews | phpnews | eq | 1.2.5 |
Related
nvd
nvd
CVE-2005-2383
2005-07-26 04:00:00
nessus
nessus
PHPNews auth.php Multiple Parameter SQL Injection
2005-07-22 00:00:00
cvelist
cvelist
CVE-2005-2383
2005-07-26 04:00:00
8.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.0%
Related for CVE-2005-2383