Lucene search

MitreCVE-2005-0302

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0302

2005-05-0204:00:00

mitre

web.nvd.nist.gov

sql injection

backoffice lite

vulnerability

security

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.002

Percentile

54.9%

JSON

SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header.

Affected configurations

Nvd

Node

comersus_open_technologiescomersus_backoffice_liteMatch6.0

comersus_open_technologiescomersus_backoffice_liteMatch6.1

VendorProductVersionCPE
comersus_open_technologiescomersus_backoffice_lite6.0cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.0:*:*:*:*:*:*:*
comersus_open_technologiescomersus_backoffice_lite6.1cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
comersus_open_technologies	comersus_backoffice_lite	6.0	cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.0:::::::*
comersus_open_technologies	comersus_backoffice_lite	6.1	cpe:2.3:a:comersus_open_technologies:comersus_backoffice_lite:6.1:::::::*

References

marc.info/?l=bugtraq&m=110636597832556&w=2

www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html

exchange.xforce.ibmcloud.com/vulnerabilities/19013

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.002

Percentile

54.9%

JSON

Related for CVE-2005-0302