Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-2135
sql injection
verify.asp
etoshop dynamic biz website builder
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.1%
SQL injection vulnerability in verify.asp in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) T1 or (2) T2 parameters.
Affected configurations
Node
etoshopdynamic_biz_website_builder_quickwebMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| etoshop:dynamic_biz_website_builder_quickweb | etoshop dynamic biz website builder quickweb | eq | 1.0 |
References
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.1%
Related for CVE-2005-2135