high7.5Public exploit code
CVE-2005-1804
Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme param…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NPDS 4.8 < 5.0 - 'links.php?Query' SQL Injection2005-05-28 · webapps · php · Verified
- NPDS 4.8 < 5.0 Glossaire Module - 'terme' SQL Injection2005-05-28 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.php) or (2) query parameter to links.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Net Portal Dynamic System | Net Portal Dynamic System | Version 5.0 |