CVE-2005-1673

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-1673
Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to index.php, (2) tid parameter to view.php, fid parameter to (3) download.php or (4) chat_download.php, (5) status parameter to icon.php, TICKET_tid parameter to (6) index.php or (7) view.php.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www.gulftech.org/?node=research&article_id=00076-05172005
http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0 Exploit Patch Vendor Advisory
http://www.gulftech.org/?node=research&article_id=00076-05172005
http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0 Exploit Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ubertec:help_center_live:*:*:*:*:*:*:*:*
History

20 Nov 2024, 23:57

Type Values Removed Values Added
References () http://www.gulftech.org/?node=research&article_id=00076-05172005 - () http://www.gulftech.org/?node=research&article_id=00076-05172005 -
References () http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0 - Exploit, Patch, Vendor Advisory () http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0 - Exploit, Patch, Vendor Advisory
Information

Published : 2005-05-19 04:00

Updated : 2024-11-20 23:57

NVD link : CVE-2005-1673

Mitre link : CVE-2005-1673

CVE.ORG link : CVE-2005-1673

JSON object : View

Products Affected

ubertec

  • help_center_live
CWE
NVD-CWE-Other