Lucene search

K
cve[email protected]CVE-2005-3916
HistoryNov 30, 2005 - 11:03 a.m.

CVE-2005-3916

2005-11-3011:03:00
web.nvd.nist.gov
17
sql injection
wsn forum
security vulnerability
remote attack
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action.

Affected configurations

NVD
Node
wsn_forumwsn_forumMatch1.21
CPENameOperatorVersion
wsn_forum:wsn_forumwsn forumeq1.21

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

Related for CVE-2005-3916