Lucene search
HistoryDec 21, 2005 - 12:03 a.m.
CVE-2005-4431
sql injection
wowbb 1.65
remote attackers
execute arbitrary sql commands
8.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.5%
SQL injection vulnerability in WowBB 1.65 allows remote attackers to execute arbitrary SQL commands via the q parameter to search.php. NOTE: the view_user.php/sort_by vector is already covered by CVE-2005-1554 and CVE-2004-2181.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wowbb:wowbb | wowbb | eq | 1.65 |
Related
cvelist
cvelist
openvas
openvas
WowBB view_user.php SQL Injection Flaw
2005-11-03 00:00:00
WowBB view_user.php SQL Injection Flaw
2005-11-03 00:00:00
WowBB <= 1.61 multiple flaws
2005-11-03 00:00:00
nessus
nessus
WowBB view_user.php Multiple Parameter SQL Injection
2005-05-11 00:00:00
WowBB <= 1.61 Multiple Vulnerabilities
2004-10-25 00:00:00
cve
cve
CVE-2005-1554
2005-05-14 04:00:00
CVE-2004-2181
2004-12-31 05:00:00
8.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.5%
Related for CVE-2005-4431