CVE-2005-4006
Published Dec 5, 2005
Last updated 9 months ago
Overview
- Description
- SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct requests to the usr/system files (1) insert_file.php, (2) insert_image.php, (3) insert_link.php, (4) insert_qcfile.php, and (5) edit.php.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-287
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redgraphic:sapid_cms:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8458C5D0-2B3A-4D8D-9484-2B3D8362D5D9",
"versionEndIncluding": "1.2.3.02"
},
{
"criteria": "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "618B2486-AB01-424B-B7F4-295FDA4CD89F"
},
{
"criteria": "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E89CB9C2-341E-41B7-A275-69C26ABD49DB"
},
{
"criteria": "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D77CFB60-2E9E-4644-9696-B412EA3CE9DF"
},
{
"criteria": "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:rc5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3747E1FE-0EF9-42D6-9A27-7F6F5B36A71C"
},
{
"criteria": "cpe:2.3:a:redgraphic:sapid_cms:1.2.3:stable:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5E70D74-B75E-48BA-B258-046D45F4DBB8"
}
],
"operator": "OR"
}
]
}
]