Lucene search
+L

3 matches found

NVD
NVD
•added 2005/10/14 10:02 a.m.•24 views

CVE-2005-3208

Multiple SQL injection vulnerabilities in 1 aeNovo, 2 aeNovoShop and 3 aeNovoWYSI allow remote attackers to execute arbitrary SQL code via a the password parameter in control.asp, and b the strSQL parameter in search.asp, which can enable XSS attacks in resulting error messages...

6.8CVSS7.8AI score0.02152EPSS
SaveExploits3References10
Cvelist
Cvelist
•added 2005/10/14 4:00 a.m.•40 views

CVE-2005-3208

Multiple SQL injection vulnerabilities in 1 aeNovo, 2 aeNovoShop and 3 aeNovoWYSI allow remote attackers to execute arbitrary SQL code via a the password parameter in control.asp, and b the strSQL parameter in search.asp, which can enable XSS attacks in resulting error messages...

7.8AI score0.02152EPSS
SaveExploits3References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/14 12:00 a.m.•9 views

CVE-2005-3208: Undefined Security Weakness

Multiple SQL injection vulnerabilities in 1 aeNovo, 2 aeNovoShop and 3 aeNovoWYSI allow remote attackers to execute arbitrary SQL code via a the password parameter in control.asp, and b the strSQL parameter in search.asp, which can enable XSS attacks in resulting error messages...

6.8CVSS6.4AI score0.02152EPSS
SaveExploits3References1
Rows per page
Query Builder