CVE-2005-3838

2005-11-2622:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.007

Percentile

80.8%

JSON

Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) lorder, (2) Priority, (3) Status, (4) Category, (5) searchvalue, and (6) field parameter.

References

pridels0.blogspot.com/2005/11/isolsoft-support-center-sql-inj.html

secunia.com/advisories/17728

securitytracker.com/id?1015270

www.osvdb.org/21102

www.securityfocus.com/bid/15570

www.vupen.com/english/advisories/2005/2592