CVE-2005-2046
Published Jun 22, 2005
Last updated 8 years ago
Overview
- Description
- Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iSub parameter to sub.asp, (3) iSub parameter to detail.asp, (4) iPro parameter to review.asp, iCat parameter to (5) catEdit.asp, (6) catDelete.asp, (7) productEdit.asp, or (8) productDelete.asp, or (9) iType parameter to type.asp.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:duware:duamazon_pro:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88339F89-2844-474B-8671-E7229D04F0F3"
},
{
"criteria": "cpe:2.3:a:duware:duamazon_pro:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC82CB07-2F3F-4B01-9BED-ABF42748592B"
}
],
"operator": "OR"
}
]
}
]