NVD

Id
69821  
Name
CVE-2005-4223  
Description
Multiple "potential" SQL injection vulnerabilities in Utopia News Pro (UNP) 1.1.4 might allow remote attackers to execute arbitrary SQL commands via (1) the newsid parameter in editnews.php, (2) the catid and question parameters in faq.php, (3) the poster parameter in postnews.php, (4) the tempid parameter in templates.php, and (5) the userid and groupid parameters in users.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-14  
Modified Date
2011-03-07  
Seq
2005-4223  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
360792 69821 CVE-2005-4223 http://glide.stanford.edu/yichen/research/sec.pdf  View
360793 69821 CVE-2005-4223 20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities  View
360794 69821 CVE-2005-4223 20051212 [PHP-CHECKER] 99 potential SQL injection vulnerabilities  View
360795 69821 CVE-2005-4223 ADV-2005-2859  View
360796 69821 CVE-2005-4223 utopianewspro-editnews-sql-injection(23564)  View

Related JVN