Lucene search

[email protected]CVE-2005-4027

HistoryDec 05, 2005 - 11:03 a.m.

CVE-2005-4027

2005-12-0511:03:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2005-4027

sql injection

simplebbs 1.1

remote attackers

arbitrary commands

search module parameters

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.4%

JSON

SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters.

Affected configurations

NVD

Node

simplemediasimplebbsMatch1.1

CPENameOperatorVersion
simplemedia:simplebbssimplemedia simplebbseq1.1

CPE	Name	Operator	Version
simplemedia:simplebbs	simplemedia simplebbs	eq	1.1

References

pridels0.blogspot.com/2005/11/simplebbs-v11-sql-inj-vuln.html

www.osvdb.org/21399

www.securityfocus.com/bid/15594

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.4%

JSON

Related for CVE-2005-4027

cvelist1 nvd1