NVD

Id
68159  
Name
CVE-2005-2468  
Description
Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) isCorrectPassword or (2) userExist function in class.auth.php, getCustomFieldReport function in (4) custom_fields.php, (5) custom_fields_graph.php, or (6) class.report.php, or the insert function in (7) releases.php or (8) class.release.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-12-31  
Modified Date
2016-10-17  
Seq
2005-2468  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
352320 68159 CVE-2005-2468 http://lists.mysql.com/eventum-users/2072  View
352321 68159 CVE-2005-2468 20050731 MySQL Eventum Multiple Vulnerabilities  View
352322 68159 CVE-2005-2468 1014603  View
352323 68159 CVE-2005-2468 http://www.gulftech.org/?node=research&article_id=00093-07312005  View
352324 68159 CVE-2005-2468 14437  View
352325 68159 CVE-2005-2468 ADV-2005-1287  View

Related JVN