CVE-2005-0410

SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV file.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-02-14

Last modified

2024-08-07

Affected products

• Citrusdb (Citrusdb)

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031709.html
• http://www.redteam-pentesting.de/advisories/rt-sa-2005-004.txt