CVE

Id
12619  
CVE No.
CVE-2005-1413  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username or (2) password parameters to admin_login.asp, or the (3) searchstring and possibly (4) ID parameters to default.asp.  
Phase
Assigned (20050503)  
Votes
None (candidate not yet proposed)  
Comments