CVE-2005-3875

The CVE-2005-3875 entry describes SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier. The affected component is the Enterprise Connector web interface, with the messageid parameter exploited via send.php or a delete action in messages.php to execute arbitrary SQL. This yields...

CVE-2005-4563

CVE-2005-4563 describes a SQL injection vulnerability in Enterprise Heart Enterprise Connector 1.0.2 (main.php) allowing remote attackers to execute arbitrary SQL via the loginid parameter and bypass login authentication. This is a different vulnerability from CVE-2005-3875, which covers multiple...