Lucene search

[email protected]CVE-2005-3976

HistoryDec 03, 2005 - 7:03 p.m.

CVE-2005-3976

2005-12-0319:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-3976

sql injection

duware products

type.asp

itype parameter

remote attackers

nvd

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

79.2%

JSON

SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter.

CPENameOperatorVersion
duware:dudirectory_produware dudirectory proeq3.0
duware:dudownloadduware dudownloadeq1.1
duware:duarticleduware duarticleeq1.1
duware:dugalleryduware dugalleryeq3.3
duware:dupaypal_produware dupaypal proeq3.0
duware:dudirectory_pro_sqlduware dudirectory pro sqleq3.0
duware:dudirectoryduware dudirectoryeq3.1
duware:dupaypalduware dupaypaleq3.1
duware:duclassifiedduware duclassifiedeq4.2
duware:duamazonduware duamazoneq3.1

CPE	Name	Operator	Version
duware:dudirectory_pro	duware dudirectory pro	eq	3.0
duware:dudownload	duware dudownload	eq	1.1
duware:duarticle	duware duarticle	eq	1.1
duware:dugallery	duware dugallery	eq	3.3
duware:dupaypal_pro	duware dupaypal pro	eq	3.0
duware:dudirectory_pro_sql	duware dudirectory pro sql	eq	3.0
duware:dudirectory	duware dudirectory	eq	3.1
duware:dupaypal	duware dupaypal	eq	3.1
duware:duclassified	duware duclassified	eq	4.2
duware:duamazon	duware duamazon	eq	3.1

Rows per page:

1-10 of 111

References

secunia.com/advisories/17835

www.osvdb.org/21385

www.securityfocus.com/bid/15681

www.vupen.com/english/advisories/2005/2700

exchange.xforce.ibmcloud.com/vulnerabilities/30673

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

79.2%

JSON

Related for CVE-2005-3976

cve3 nessus1