CVE-2005-3315

2005-10-3020:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.959 High

EPSS

Percentile

99.5%

JSON

Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp.

References

cirt.dk/advisories/cirt-39-advisory.pdf

secunia.com/advisories/17358

securityreason.com/securityalert/124

securitytracker.com/id?1015116

support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm

www.kb.cert.org/vuls/id/536300

www.osvdb.org/20362

www.osvdb.org/20363

www.securityfocus.com/archive/1/414880

www.securityfocus.com/bid/15220

www.vupen.com/english/advisories/2005/2238