CVE
- Id
- 12619
- CVE No.
- CVE-2005-1413
- Status
- Candidate
- Description
- Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username or (2) password parameters to admin_login.asp, or the (3) searchstring and possibly (4) ID parameters to default.asp.
- Phase
- Assigned (20050503)
- Votes
- None (candidate not yet proposed)
- Comments