CVE

Id
12430  
CVE No.
CVE-2005-1224  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) nChannel parameter to default.asp, cat.asp, or detail.asp, (2) the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or detail.asp (3) the iCat parameter to cat.asp or detail.asp, (4) the iData parameter to detail.asp or result.asp, the (5) POL_ID, (6) POL_PARENT, (7) POL_CATEGORY, (8) CHA_NAME, or (9) CHA_ID parameters to inc_vote.asp, or the (10) tfm_order or (11) tfm_orderby parameters to toppages.asp, a different set of vulnerabilities than CVE-2005-1236.  
Phase
Assigned (20050422)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
89420 12430 CVE-2005-1224 BUGTRAQ:20050420 DUportal Pro 3.4 has MANY Sql injection and Sql Errors.  View
89421 12430 CVE-2005-1224 URL:http://marc.info/?l=bugtraq&m=111401172901705&w=2  View
89422 12430 CVE-2005-1224 BUGTRAQ:20061202 [Aria-Security Team] DuWare DuPortal SQL Injection Vuln  View
89423 12430 CVE-2005-1224 URL:http://www.securityfocus.com/archive/1/archive/1/453316/100/0/threaded  View
89424 12430 CVE-2005-1224 MISC:http://www.digitalparadox.org/advisories/duppro.txt  View
89425 12430 CVE-2005-1224 MISC:http://www.securiteam.com/windowsntfocus/5TP0O0AFFQ.html  View
89426 12430 CVE-2005-1224 BID:13285  View
89427 12430 CVE-2005-1224 URL:http://www.securityfocus.com/bid/13285  View
89428 12430 CVE-2005-1224 SECUNIA:15031  View
89429 12430 CVE-2005-1224 URL:http://secunia.com/advisories/15031  View
89430 12430 CVE-2005-1224 XF:duportal-multiple-sql-injection(20197)  View
89431 12430 CVE-2005-1224 URL:http://xforce.iss.net/xforce/xfdb/20197  View
89432 12430 CVE-2005-1224 XF:duportal-default-cat-sql-injection(30671)  View

Related JVN