Lucene search

[email protected]CVE-2005-3976

HistoryDec 03, 2005 - 7:03 p.m.

CVE-2005-3976

2005-12-0319:03:00

[email protected]

web.nvd.nist.gov

cve-2005-3976

sql injection

duware products

type.asp

itype parameter

remote attackers

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

JSON

SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter.

Affected configurations

NVD

Node

duwareduamazonMatch3.1

duwareduarticleMatch1.1

duwareduclassifiedMatch4.2

duwaredudirectoryMatch3.1

duwaredudirectory_proMatch3.0

duwaredudirectory_pro_sqlMatch3.0

duwaredudownloadMatch1.1

duwaredugalleryMatch3.3

duwaredunewsMatch1.1

duwaredupaypalMatch3.1

duwaredupaypal_proMatch3.0

CPENameOperatorVersion
duware:duamazonduware duamazoneq3.1
duware:duarticleduware duarticleeq1.1
duware:duclassifiedduware duclassifiedeq4.2
duware:dudirectoryduware dudirectoryeq3.1
duware:dudirectory_produware dudirectory proeq3.0
duware:dudirectory_pro_sqlduware dudirectory pro sqleq3.0
duware:dudownloadduware dudownloadeq1.1
duware:dugalleryduware dugalleryeq3.3
duware:dunewsduware dunewseq1.1
duware:dupaypalduware dupaypaleq3.1

CPE	Name	Operator	Version
duware:duamazon	duware duamazon	eq	3.1
duware:duarticle	duware duarticle	eq	1.1
duware:duclassified	duware duclassified	eq	4.2
duware:dudirectory	duware dudirectory	eq	3.1
duware:dudirectory_pro	duware dudirectory pro	eq	3.0
duware:dudirectory_pro_sql	duware dudirectory pro sql	eq	3.0
duware:dudownload	duware dudownload	eq	1.1
duware:dugallery	duware dugallery	eq	3.3
duware:dunews	duware dunews	eq	1.1
duware:dupaypal	duware dupaypal	eq	3.1

Rows per page:

1-10 of 111

References

secunia.com/advisories/17835

www.osvdb.org/21385

www.securityfocus.com/bid/15681

www.vupen.com/english/advisories/2005/2700

exchange.xforce.ibmcloud.com/vulnerabilities/30673

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

JSON

Related for CVE-2005-3976

cvelist4 nvd4 cve3 nessus1