CVE-2005-1413
published 2005-05-03CVE-2005-1413: Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username or (2)…
PriorityP345high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
5.79%
92.2th percentile
Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username or (2) password parameters to admin_login.asp, or the (3) searchstring and possibly (4) ID parameters to default.asp.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| envivosoft | envivo_cms | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-hw7m-4fmm-qrwf: Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username
ghsa_unreviewed·2022-05-01
CVE-2005-1413 [HIGH] GHSA-hw7m-4fmm-qrwf: Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username
Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username or (2) password parameters to admin_login.asp, or the (3) searchstring and possibly (4) ID parameters to default.asp.
GHSA
GHSA-7939-9gq4-g76m: SQL injection vulnerability in default
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2007-3783 [HIGH] GHSA-7939-9gq4-g76m: SQL injection vulnerability in default
SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4.
No detection rules found.
No writeups or analysis indexed.
http://digitalparadox.org/viewadvisories.ah?view=37http://marc.info/?l=full-disclosure&m=118414271202945&w=2http://secunia.com/advisories/15173http://securitytracker.com/id?1013843http://securityvulns.ru/Rdocument425.htmlhttp://www.osvdb.org/15964http://www.osvdb.org/15965http://www.osvdb.org/15966http://www.securityfocus.com/bid/13437http://www.securityfocus.com/bid/13439http://www.securityfocus.com/bid/13440http://www.securityfocus.com/bid/24860https://exchange.xforce.ibmcloud.com/vulnerabilities/20313http://digitalparadox.org/viewadvisories.ah?view=37http://marc.info/?l=full-disclosure&m=118414271202945&w=2http://secunia.com/advisories/15173http://securitytracker.com/id?1013843http://securityvulns.ru/Rdocument425.htmlhttp://www.osvdb.org/15964http://www.osvdb.org/15965http://www.osvdb.org/15966http://www.securityfocus.com/bid/13437http://www.securityfocus.com/bid/13439http://www.securityfocus.com/bid/13440http://www.securityfocus.com/bid/24860https://exchange.xforce.ibmcloud.com/vulnerabilities/20313
2005-05-03
Published