Lucene search
HistoryDec 21, 2005 - 12:03 a.m.
CVE-2005-4431
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.6%
SQL injection vulnerability in WowBB 1.65 allows remote attackers to execute arbitrary SQL commands via the q parameter to search.php. NOTE: the view_user.php/sort_by vector is already covered by CVE-2005-1554 and CVE-2004-2181.
Affected configurations
Node
wowbbwowbbMatch1.65
Related
cvelist
cvelist
cve
cve
nvd
nvd
CVE-2004-2181
2004-12-31 05:00:00
CVE-2005-1554
2005-05-14 04:00:00
openvas
openvas
WowBB view_user.php SQL Injection Flaw
2005-11-03 00:00:00
WowBB view_user.php SQL Injection Flaw
2005-11-03 00:00:00
WowBB <= 1.61 multiple flaws
2005-11-03 00:00:00
nessus
nessus
WowBB view_user.php Multiple Parameter SQL Injection
2005-05-11 00:00:00
WowBB <= 1.61 Multiple Vulnerabilities
2004-10-25 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.6%
Related for NVD:CVE-2005-4431