Vulnerability Details CVE-2005-4662
Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form, a different vulnerability than CVE-2005-4664.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/17470
- http://sourceforge.net/project/showfiles.php?group_id=45554
- http://sourceforge.net/project/shownotes.php?release_id=369163
- http://www.osvdb.org/20751
- http://www.securityfocus.com/bid/15386
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23085
- http://secunia.com/advisories/17470
- http://sourceforge.net/project/showfiles.php?group_id=45554
- http://sourceforge.net/project/shownotes.php?release_id=369163
- http://www.osvdb.org/20751
- http://www.securityfocus.com/bid/15386
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23085
Products affected by CVE-2005-4662
-
cpe:2.3:a:ocomon:ocomon:1.11
-
cpe:2.3:a:ocomon:ocomon:1.12
-
cpe:2.3:a:ocomon:ocomon:1.13
-
cpe:2.3:a:ocomon:ocomon:1.14
-
cpe:2.3:a:ocomon:ocomon:1.20
-
cpe:2.3:a:ocomon:ocomon:1.21