NVD

Id
66970  
Name
CVE-2005-1224  
Description
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) nChannel parameter to default.asp, cat.asp, or detail.asp, (2) the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or detail.asp (3) the iCat parameter to cat.asp or detail.asp, (4) the iData parameter to detail.asp or result.asp, the (5) POL_ID, (6) POL_PARENT, (7) POL_CATEGORY, (8) CHA_NAME, or (9) CHA_ID parameters to inc_vote.asp, or the (10) tfm_order or (11) tfm_orderby parameters to toppages.asp, a different set of vulnerabilities than CVE-2005-1236.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-05-02  
Modified Date
2017-07-10  
Seq
2005-1224  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
347733 66970 CVE-2005-1224 20050420 DUportal Pro 3.4 has MANY Sql injection and Sql Errors.  View
347734 66970 CVE-2005-1224 http://www.securiteam.com/windowsntfocus/5TP0O0AFFQ.html  View
347735 66970 CVE-2005-1224 20061202 [Aria-Security Team] DuWare DuPortal SQL Injection Vuln  View
347736 66970 CVE-2005-1224 13285  View
347737 66970 CVE-2005-1224 duportal-multiple-sql-injection(20197)  View
347738 66970 CVE-2005-1224 duportal-default-cat-sql-injection(30671)  View

Related JVN