high7.5
CVE-2005-4309
SQL injection vulnerability in ezUpload Pro 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters.
Impact
SQL injection vulnerability in ezUpload Pro 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Scriptscenter | Ezupload Pro | through 2.2 Versions 1.1, 2.0, 2.0.1, 2.1 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2005/12/ezupload-pro-vuln.html
- http://www.osvdb.org/21912
- http://www.securityfocus.com/bid/15919
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23785
- http://pridels0.blogspot.com/2005/12/ezupload-pro-vuln.html
- http://www.osvdb.org/21912
- http://www.securityfocus.com/bid/15919
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23785