CVE-2005-4608 SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via the (1) devWherePair[0], (2) orderBy, and (3) where parameters.
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via the (1) devWherePair[0], (2) orderBy, and (3) where parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| incogen bugport | = 1.039 | No fix listed |
| incogen bugport | = 1.040 | No fix listed |
| incogen bugport | = 1.041 | No fix listed |
| incogen bugport | = 1.042 | No fix listed |
| incogen bugport | = 1.043 | No fix listed |
| incogen bugport | = 1.044 | No fix listed |
| incogen bugport | = 1.045 | No fix listed |
| incogen bugport | = 1.046 | No fix listed |
| incogen bugport | = 1.047 | No fix listed |
| incogen bugport | = 1.048 | No fix listed |
| incogen bugport | = 1.049 | No fix listed |
| incogen bugport | = 1.050 | No fix listed |
| incogen bugport | = 1.051 | No fix listed |
| incogen bugport | = 1.052 | No fix listed |
| incogen bugport | = 1.053 | No fix listed |
| incogen bugport | = 1.054 | No fix listed |
| incogen bugport | = 1.055 | No fix listed |
| incogen bugport | = 1.056 | No fix listed |
| incogen bugport | = 1.057 | No fix listed |
| incogen bugport | = 1.058 | No fix listed |
| incogen bugport | = 1.059 | No fix listed |
| incogen bugport | = 1.060 | No fix listed |
| incogen bugport | = 1.061 | No fix listed |
| incogen bugport | = 1.062 | No fix listed |
| incogen bugport | = 1.063 | No fix listed |
Show 84 more
| Product | Affected versions | Fixed in |
|---|---|---|
| incogen bugport | = 1.064 | No fix listed |
| incogen bugport | = 1.065 | No fix listed |
| incogen bugport | = 1.066 | No fix listed |
| incogen bugport | = 1.067 | No fix listed |
| incogen bugport | = 1.068 | No fix listed |
| incogen bugport | = 1.069 | No fix listed |
| incogen bugport | = 1.070 | No fix listed |
| incogen bugport | = 1.071 | No fix listed |
| incogen bugport | = 1.072 | No fix listed |
| incogen bugport | = 1.073 | No fix listed |
| incogen bugport | = 1.074 | No fix listed |
| incogen bugport | = 1.075 | No fix listed |
| incogen bugport | = 1.076 | No fix listed |
| incogen bugport | = 1.077 | No fix listed |
| incogen bugport | = 1.078 | No fix listed |
| incogen bugport | = 1.079 | No fix listed |
| incogen bugport | = 1.080 | No fix listed |
| incogen bugport | = 1.081 | No fix listed |
| incogen bugport | = 1.082 | No fix listed |
| incogen bugport | = 1.083 | No fix listed |
| incogen bugport | = 1.084 | No fix listed |
| incogen bugport | = 1.085 | No fix listed |
| incogen bugport | = 1.086 | No fix listed |
| incogen bugport | = 1.087 | No fix listed |
| incogen bugport | = 1.088 | No fix listed |
| incogen bugport | = 1.089 | No fix listed |
| incogen bugport | = 1.090 | No fix listed |
| incogen bugport | = 1.091 | No fix listed |
| incogen bugport | = 1.092 | No fix listed |
| incogen bugport | = 1.093 | No fix listed |
| incogen bugport | = 1.094 | No fix listed |
| incogen bugport | = 1.095 | No fix listed |
| incogen bugport | = 1.096 | No fix listed |
| incogen bugport | = 1.097 | No fix listed |
| incogen bugport | = 1.098 | No fix listed |
| incogen bugport | = 1.099 | No fix listed |
| incogen bugport | = 1.100 | No fix listed |
| incogen bugport | = 1.101 | No fix listed |
| incogen bugport | = 1.102 | No fix listed |
| incogen bugport | = 1.103 | No fix listed |
| incogen bugport | = 1.104 | No fix listed |
| incogen bugport | = 1.105 | No fix listed |
| incogen bugport | = 1.106 | No fix listed |
| incogen bugport | = 1.107 | No fix listed |
| incogen bugport | = 1.108 | No fix listed |
| incogen bugport | = 1.109 | No fix listed |
| incogen bugport | = 1.110 | No fix listed |
| incogen bugport | = 1.111 | No fix listed |
| incogen bugport | = 1.112 | No fix listed |
| incogen bugport | = 1.113 | No fix listed |
| incogen bugport | = 1.114 | No fix listed |
| incogen bugport | = 1.115 | No fix listed |
| incogen bugport | = 1.116 | No fix listed |
| incogen bugport | = 1.117 | No fix listed |
| incogen bugport | = 1.118 | No fix listed |
| incogen bugport | = 1.119 | No fix listed |
| incogen bugport | = 1.120 | No fix listed |
| incogen bugport | = 1.121 | No fix listed |
| incogen bugport | = 1.122 | No fix listed |
| incogen bugport | = 1.123 | No fix listed |
| incogen bugport | = 1.124 | No fix listed |
| incogen bugport | = 1.125 | No fix listed |
| incogen bugport | = 1.126 | No fix listed |
| incogen bugport | = 1.127 | No fix listed |
| incogen bugport | = 1.128 | No fix listed |
| incogen bugport | = 1.129 | No fix listed |
| incogen bugport | = 1.130 | No fix listed |
| incogen bugport | = 1.131 | No fix listed |
| incogen bugport | = 1.132 | No fix listed |
| incogen bugport | = 1.133 | No fix listed |
| incogen bugport | = 1.134 | No fix listed |
| incogen bugport | = 1.135 | No fix listed |
| incogen bugport | = 1.136 | No fix listed |
| incogen bugport | = 1.137 | No fix listed |
| incogen bugport | = 1.138 | No fix listed |
| incogen bugport | = 1.139 | No fix listed |
| incogen bugport | = 1.140 | No fix listed |
| incogen bugport | = 1.141 | No fix listed |
| incogen bugport | = 1.142 | No fix listed |
| incogen bugport | = 1.143 | No fix listed |
| incogen bugport | = 1.144 | No fix listed |
| incogen bugport | = 1.145 | No fix listed |
| incogen bugport | = 1.146 | No fix listed |
| incogen bugport | = 1.147 | No fix listed |
References
- pridels0.blogspot.com
- 18282 third-party-advisory vendor-advisory
- 22142 vdb-entry
- 16121 vdb-entry
- ADV-2006-0009 vdb-entry
- bugport-index-sql-injection(23919) vdb-entry