Lucene search
HistoryDec 21, 2005 - 8:03 p.m.
CVE-2005-4461
cve
2005
4461
sql injection
beehive forum
index.php
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.7%
SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_sess parameter.
Affected configurations
Node
beehive_forumbeehive_forumMatch0.1
ORbeehive_forumbeehive_forumMatch0.1.1
ORbeehive_forumbeehive_forumMatch0.2
ORbeehive_forumbeehive_forumMatch0.3
ORbeehive_forumbeehive_forumMatch0.3.1
ORbeehive_forumbeehive_forumMatch0.4
ORbeehive_forumbeehive_forumMatch0.5
ORbeehive_forumbeehive_forumMatch0.6.2
ORbeehive_forumbeehive_forumMatch0.6rc1
ORbeehive_forumbeehive_forumMatch0.6rc2
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.7%
Related for CVE-2005-4461