Lucene search
HistoryJun 22, 2005 - 4:00 a.m.
CVE-2005-2049
cve
duware
duclassmate
sql injection
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.1%
Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) iState parameter to default.asp or (2) iPro parameter to edit.asp.
Affected configurations
Node
duwareduclassmateMatch1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| duware:duclassmate | duware duclassmate | eq | 1.2 |
Related
nessus
nessus
DUclassmate Multiple Scripts SQL Injection
2005-06-28 00:00:00
cvelist
cvelist
CVE-2005-2049
2005-06-22 04:00:00
CVE-2006-6355
2006-12-07 01:00:00
nvd
nvd
CVE-2005-2049
2005-06-22 04:00:00
CVE-2006-6355
2006-12-07 01:28:00
cve
cve
CVE-2006-6355
2006-12-07 01:28:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.1%
Related for CVE-2005-2049