CVE-2005-4038

SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attackers to execute arbitrary SQL commands via the idp parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-12-06

Last modified

2024-08-07

Affected products

• Portal Solutions (Web4future)

References

• http://pridels0.blogspot.com/2005/12/web4future-portal-solutions-news.html
• http://secunia.com/advisories/17880
• http://www.osvdb.org/21422
• http://www.securityfocus.com/bid/15716
• http://www.vupen.com/english/advisories/2005/2733
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23419