Lucene search

[email protected]NVD:CVE-2005-4606

HistoryDec 31, 2005 - 5:00 a.m.

CVE-2005-4606

2005-12-3105:00:00

CWE-89

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.6%

JSON

SQL injection vulnerability in check_user.asp in multiple Web Wiz products including (1) Site News 3.06 and earlier, (2) Journal 1.0 and earlier, (3) Polls 3.06 and earlier, and (4) and Database Login 1.71 and earlier allows remote attackers to execute arbitrary SQL commands via the txtUserName parameter.

Affected configurations

NVD

Node

webwizdatabase_loginRange≤1.71

webwizjournalRange≤1.0

webwizsite_newsRange≤3.06

webwizsite_newsMatch2.00

webwizweekly_pollRange≤3.06

References

secunia.com/advisories/18263

securityreason.com/securityalert/305

www.osvdb.org/22148

www.securityfocus.com/archive/1/420551/100/0/threaded

www.securityfocus.com/bid/16085

www.vupen.com/english/advisories/2006/0007

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.6%

JSON

Related for NVD:CVE-2005-4606

cve1 nessus1 cvelist1