CVE-2005-0368

Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) EntryID or (2) searchterm parameter to index.php, or (3) username parameter to authenticate.php.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-05-02

Last modified

2024-08-07

Affected products

• Cmscore (Chipmunk Scripts)

References

• http://marc.info/?l=bugtraq&m=110803385223054&w=2
• http://secunia.com/advisories/14142/
• http://www.securityfocus.com/bid/12457
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19235