Lucene search

[email protected]CVE-2005-2440

HistoryAug 03, 2005 - 4:00 a.m.

CVE-2005-2440

2005-08-0304:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-2440

sql injection

thomson web skill vantage manager

remote attackers

nvd

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

79.1%

JSON

SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitrary SQL commands via the svmPassword parameter.

CPENameOperatorVersion
thomson_netg:web_skill_vantage_managerthomson netg web skill vantage managereq2.5

CPE	Name	Operator	Version
thomson_netg:web_skill_vantage_manager	thomson netg web skill vantage manager	eq	2.5

References

marc.info/?l=bugtraq&m=112258777107822&w=2

secunia.com/advisories/16268/

www.osvdb.org/18330

www.securityfocus.com/bid/14409

exchange.xforce.ibmcloud.com/vulnerabilities/21637

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

79.1%

JSON