CVE

Id
15180  
CVE No.
CVE-2005-3976  
Status
Candidate  
Description
SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter.  
Phase
Assigned (20051203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
118583 15180 CVE-2005-3976 BID:15681  View
118584 15180 CVE-2005-3976 URL:http://www.securityfocus.com/bid/15681  View
118585 15180 CVE-2005-3976 VUPEN:ADV-2005-2700  View
118586 15180 CVE-2005-3976 URL:http://www.vupen.com/english/advisories/2005/2700  View
118587 15180 CVE-2005-3976 OSVDB:21385  View
118588 15180 CVE-2005-3976 URL:http://www.osvdb.org/21385  View
118589 15180 CVE-2005-3976 SECUNIA:17835  View
118590 15180 CVE-2005-3976 URL:http://secunia.com/advisories/17835  View
118591 15180 CVE-2005-3976 XF:dunews-type-detail-sql-injection(30673)  View

Related JVN