CVE-2005-4554 Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in an openforum action (openforum...
HighCVSS 7.5
EPSS 3.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in an openforum action (openforum.php) in index.php, (2) cat parameter in getfile.php, and (3) target parameter in download_now.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dev web management system | = 1.5 | No fix listed |
References
- rgod.altervista.org exploit
- 18239 exploit third-party-advisory vendor-advisory
- 1015410 exploit vdb-entry
- 22040 vdb-entry
- 22041 vdb-entry
- 22042 vdb-entry
- 20051224 Dev web management system <= 1.5 SQL injection / cross site scripting mailing-list
- 16063 exploit vdb-entry
- dev-openforum-sql-injection(23898) vdb-entry