← Zuruck zu CVEs
CVE-2005-4010
N/ABeschreibung
SQL injection vulnerability in KBase Express 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to category.php and (2) search parameters to search.php.
CVE Details
CVSS v3.1 BewertungN/A
Veroffentlicht12/5/2005
Zuletzt geandert4/16/2026
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
sensation_designs:kbase_express
Referenzen
http://secunia.com/advisories/17806(cve@mitre.org)
http://www.osvdb.org/21340(cve@mitre.org)
http://www.osvdb.org/21341(cve@mitre.org)
http://www.securityfocus.com/bid/15635(cve@mitre.org)
http://www.vupen.com/english/advisories/2005/2641(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/23309(cve@mitre.org)
http://pridels0.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/17806(af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/21340(af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/21341(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/15635(af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2005/2641(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/23309(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.