Vulnerability Details : CVE-2005-2692
Potential exploit
Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) addquery and (2) subquery parameters to the newbb plus module, the forum parameter to (3) newtopic.php, (4) edit.php, or (5) reply.php in the newbb plus module, or (6) the msg_id parameter to print.php in the messages module.
Vulnerability category: Sql Injection
Products affected by CVE-2005-2692
- cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*
- cpe:2.3:a:runcms:runcms:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:runcms:runcms:1.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2005-2692
0.45%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 61 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2005-2692
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2005-2692
-
http://secunia.com/advisories/16514
Vendor Advisory
-
http://www.gulftech.org/?node=research&article_id=00094-08192005
Exploit;Vendor Advisory
Jump to