NVD

Id
67757  
Name
CVE-2005-2048  
Description
Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) iMsg parameter to messages.asp, iFor parameter to (2) post.asp or (3) forums.asp, or (4) id parameter to userEdit.asp. NOTE: vectors 1 and 3 were later reported to affect version 3.0.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-06-22  
Modified Date
2017-07-10  
Seq
2005-2048  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
350564 67757 CVE-2005-2048 http://echo.or.id/adv/adv19-theday-2005.txt  View
350565 67757 CVE-2005-2048 20050622 [ECHO_ADV_19$2005] Multiple SQL INJECTION in DUWARE Products  View
350566 67757 CVE-2005-2048 20061202 [Aria-Security Team] DuWare DuForum SQL Injection Vuln  View
350567 67757 CVE-2005-2048 duforum-messages-forums-sql-injection(30668)  View

Related JVN