Lucene search
HistoryMay 31, 2005 - 4:00 a.m.
CVE-2005-1779
cve-2005-1779
sql injection
maxwebportal
remote code execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.4%
SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter.
Affected configurations
Node
maxwebportalmaxwebportalMatch1.35
ORmaxwebportalmaxwebportalMatch1.36
ORmaxwebportalmaxwebportalMatch2.0
ORmaxwebportalmaxwebportalMatch2005-04-18
Related
nvd
nvd
CVE-2005-1779
2005-05-31 04:00:00
cvelist
cvelist
CVE-2005-1779
2005-05-31 04:00:00
nessus
nessus
MaxWebPortal memKey Parameter SQL Injection
2005-05-26 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.4%
Related for CVE-2005-1779