high7.5
CVE-2005-1302
SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field.
Impact
SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Swsoft | Confixx | Versions 3.0.6, 3.0.8, pro_3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111444886429814&w=2
- http://secunia.com/advisories/15121
- http://securityreason.com/securityalert/694
- http://www.osvdb.org/15815
- http://www.securityfocus.com/bid/13355
- http://marc.info/?l=bugtraq&m=111444886429814&w=2
- http://secunia.com/advisories/15121
- http://securityreason.com/securityalert/694
- http://www.osvdb.org/15815
- http://www.securityfocus.com/bid/13355