Lucene search
HistoryNov 26, 2005 - 8:03 p.m.
CVE-2005-3833
cve-2005-3833
sql injection
tunez 1.21
vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.0%
SQL injection vulnerability in songinfo.php in Tunez 1.21 and earlier allows remote attackers to execute arbitrary SQL commands via the song_id parameter.
Affected configurations
Node
tuneztunezMatch0.1
ORtuneztunezMatch0.2
ORtuneztunezMatch0.3
ORtuneztunezMatch0.4
ORtuneztunezMatch0.5
ORtuneztunezMatch0.5.5
ORtuneztunezMatch0.7
ORtuneztunezMatch0.9
ORtuneztunezMatch1.0.0
ORtuneztunezMatch1.1
ORtuneztunezMatch1.15
ORtuneztunezMatch1.20
ORtuneztunezMatch1.21
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.0%
Related for CVE-2005-3833