Lucene search
HistoryOct 30, 2005 - 2:34 p.m.
CVE-2005-3364
cve-2005-3364
sql injection
dboardgear
remote attackers
execute arbitrary commands
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.6%
Multiple SQL injection vulnerabilities in DboardGear allow remote attackers to execute arbitrary SQL commands via (1) the buddy parameter in buddy.php, (2) the u2uid parameter in u2u.php, and (3) an invalid theme file in the themes action to ctrtools.php.
Affected configurations
Node
platinumdboardgear
| CPE | Name | Operator | Version |
|---|---|---|---|
| platinum:dboardgear | platinum dboardgear | eq | * |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.6%
Related for CVE-2005-3364