Lucene search

MitreCVE-2005-3916

HistoryNov 30, 2005 - 11:03 a.m.

CVE-2005-3916

2005-11-3011:03:00

mitre

web.nvd.nist.gov

sql injection

wsn forum

security vulnerability

remote attack

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.006

Percentile

78.0%

JSON

SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action.

Affected configurations

Nvd

Node

wsn_forumwsn_forumMatch1.21

VendorProductVersionCPE
wsn_forumwsn_forum1.21cpe:2.3:a:wsn_forum:wsn_forum:1.21:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wsn_forum	wsn_forum	1.21	cpe:2.3:a:wsn_forum:wsn_forum:1.21:::::::*

References

pridels0.blogspot.com/2005/11/wsn-forum-id-sql-injection.html

secunia.com/advisories/17694

www.osvdb.org/21068

www.securityfocus.com/bid/15549

www.vupen.com/english/advisories/2005/2548

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.006

Percentile

78.0%

JSON

Related for CVE-2005-3916