CVE-2005-0911

Multiple SQL injection vulnerabilities in exoops may allow remote attackers to execute arbitrary SQL commands via (1) the viewcat parameter to index.php or (2) the artid parameter in the viewarticle action for index.php.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-03-28

Last modified

2024-08-07

Affected products

• E-xoops (E-xoops)

References

• http://securitytracker.com/id?1013566