Lucene search
HistoryJun 22, 2005 - 4:00 a.m.
CVE-2005-2047
cve
2005
2047
sql injection
duware
dupaypal pro 3.0
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.6%
Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iPro parameter to detail.asp, (3) iSub parameter to sub.asp, (4) iCat parameter to catEdit.asp.
Affected configurations
Node
duwaredupaypal_proMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| duware:dupaypal_pro | duware dupaypal pro | eq | 3.0 |
Related
cvelist
cvelist
CVE-2005-2047
2005-06-22 04:00:00
CVE-2006-6365
2006-12-07 11:00:00
nvd
nvd
CVE-2005-2047
2005-06-22 04:00:00
CVE-2006-6365
2006-12-07 11:28:00
nessus
nessus
DUpaypal Pro Multiple Scripts SQL Injection
2005-06-28 00:00:00
cve
cve
CVE-2006-6365
2006-12-07 11:28:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.6%
Related for CVE-2005-2047