high7.5Public exploit code
CVE-2005-4378
SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities2005-12-19 · webapps · asp · Verified
Impact
SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nma | Baseline Cms | through 1.95 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2005/12/baseline-cms-vuln.html
- http://www.osvdb.org/21939
- http://www.securityfocus.com/bid/15961
- http://www.vupen.com/english/advisories/2005/2974
- http://pridels0.blogspot.com/2005/12/baseline-cms-vuln.html
- http://www.osvdb.org/21939
- http://www.securityfocus.com/bid/15961
- http://www.vupen.com/english/advisories/2005/2974