CVE-2005-2987 in Digital Scribe

Riassunto

di MITRE

SQL injection vulnerability in login.php in Digital Scribe 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 19/09/2005
• Divulgazione: 19/09/2005
• Moderazione: accettato
• Voce: VDB-26340
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 7.3 (VulDB)
• EPSS: 0.01888
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-2987
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-2987
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-2987/