Vulnerability Details CVE-2005-3874
SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the p_entry parameter in an entry command to index.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.2%
CVSS Severity
CVSS v2 Score 7.5
References
- http://pridels0.blogspot.com/2005/11/netzbrett-151-sql-inj-vuln.html
- http://secunia.com/advisories/17742
- http://www.osvdb.org/21139
- http://www.securityfocus.com/bid/15593
- http://www.vupen.com/english/advisories/2005/2611
- http://pridels0.blogspot.com/2005/11/netzbrett-151-sql-inj-vuln.html
- http://secunia.com/advisories/17742
- http://www.osvdb.org/21139
- http://www.securityfocus.com/bid/15593
- http://www.vupen.com/english/advisories/2005/2611
Products affected by CVE-2005-3874
-
cpe:2.3:a:weaverslave:netzbrett:*