CVE-2005-4397

CVE-2005-4397 describes an SQL injection vulnerability in iCMS’s RunScript.asp where the Event_ID parameter enables remote attackers to execute arbitrary SQL commands. Public references (OSVDB, Secunia, NVD) list a CVSS v2 base score of 7.5 (HIGH) with network access, no authentication, and parti...

CVE-2005-4397

SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the EventID parameter...

CVE-2005-4397: Undefined Security Weakness

SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the EventID parameter...

CVE-2005-1481: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute arbitrary SQL commands via the EventID parameter to 1 defer.asp or 2 details.asp...

CVE-2005-1017

SQL injection vulnerability in the UpdateEvents function in eventsfunctions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENTID parameter, as demonstrated using events.asp...

CVE-2005-1017: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the UpdateEvents function in eventsfunctions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENTID parameter, as demonstrated using events.asp...