Vulnerability Details CVE-2005-2440
SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitrary SQL commands via the svmPassword parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=112258777107822&w=2
- http://secunia.com/advisories/16268/
- http://www.osvdb.org/18330
- http://www.securityfocus.com/bid/14409
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21637
- http://marc.info/?l=bugtraq&m=112258777107822&w=2
- http://secunia.com/advisories/16268/
- http://www.osvdb.org/18330
- http://www.securityfocus.com/bid/14409
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21637
Products affected by CVE-2005-2440
-
cpe:2.3:a:thomson_netg:web_skill_vantage_manager:2.5