Lucene search

MitreCVE-2005-4264

HistoryDec 15, 2005 - 11:03 a.m.

CVE-2005-4264

2005-12-1511:03:00

mitre

web.nvd.nist.gov

cve

sql injection

index.php

php support tickets 2.0

remote attackers

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.008

Percentile

81.6%

JSON

Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields, and (3) id parameter.

Affected configurations

Nvd

Node

triangle_solutionsphp_support_ticketsMatch2.0

VendorProductVersionCPE
triangle_solutionsphp_support_tickets2.0cpe:2.3:a:triangle_solutions:php_support_tickets:2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
triangle_solutions	php_support_tickets	2.0	cpe:2.3:a:triangle_solutions:php_support_tickets:2.0:::::::*

References

secunia.com/advisories/18067

securitytracker.com/id?1015352

www.nii.co.in/vuln/PHPSupportTickets.html

www.osvdb.org/21730

www.securityfocus.com/bid/15853

www.vupen.com/english/advisories/2005/2928

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.008

Percentile

81.6%

JSON

Related for CVE-2005-4264