CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

CVE•added 2005/12/20 2:00 a.m.•59 views

CVE-2005-4382

The CVE-2005-4382 entry describes an SQL injection vulnerability in CitySoft Community Enterprise 4.x. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying crafted values for (1) nodeID, (2) pageID, (3) ID, (4) parentid parameters to index.cfm and (5) documentF...

7.5CVSS8.8AI score0.01333EPSS

SaveExploits0References6Affected Software1

Cvelist•added 2005/12/20 2:00 a.m.•35 views

CVE-2005-4382

SQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to execute arbitrary SQL commands via the 1 nodeID, 2 pageID, 3 ID, and 4 parentid parameter to index.cfm; and 5 documentFormatId parameter to document/docWindow.cfm...

8.4AI score0.01333EPSS

SaveExploits0References6

Rapid7 Vulnerability Database (full)•added 2005/12/20 12:00 a.m.•3 views

CVE-2005-4384: Undefined Security Weakness

CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid 1 fuseaction parameter to index.cfm and 2 documentid parameter to document/docWindow.cfm...

6.4CVSS5.9AI score0.01351EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2005/12/20 12:00 a.m.•4 views

CVE-2005-4382: Improper Neutralization of Special Elements used in an SQL Command

7.5CVSS6.4AI score0.01333EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by