Lucene search

[email protected]CVE-2005-2788

HistorySep 02, 2005 - 11:03 p.m.

CVE-2005-2788

2005-09-0223:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-2788

sql injection

land down under

ldu 801

remote attackers

arbitrary sql commands

8.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.5%

JSON

Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to (1) events.php, (2) index.php, or (3) list.php.

CPENameOperatorVersion
neocrome:land_down_underneocrome land down undereq700.01
neocrome:land_down_underneocrome land down undereq700.04
neocrome:land_down_underneocrome land down undereq701
neocrome:land_down_underneocrome land down undereq801
neocrome:land_down_underneocrome land down undereq700.02
neocrome:land_down_underneocrome land down undereq700.03
neocrome:land_down_underneocrome land down undereq800
neocrome:land_down_underneocrome land down undereq700.05

CPE	Name	Operator	Version
neocrome:land_down_under	neocrome land down under	eq	700.01
neocrome:land_down_under	neocrome land down under	eq	700.04
neocrome:land_down_under	neocrome land down under	eq	701
neocrome:land_down_under	neocrome land down under	eq	801
neocrome:land_down_under	neocrome land down under	eq	700.02
neocrome:land_down_under	neocrome land down under	eq	700.03
neocrome:land_down_under	neocrome land down under	eq	800
neocrome:land_down_under	neocrome land down under	eq	700.05

References

marc.info/?l=bugtraq&m=112534574505945&w=2

www.securityfocus.com/bid/14685

exchange.xforce.ibmcloud.com/vulnerabilities/22047

8.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.5%

JSON

Related for CVE-2005-2788

openvas2 nessus1