high7.5Public exploit code
CVE-2005-4419
Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbit…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Quick Square Development Honeycomb Archive 3.0 - 'CategoryResults.cfm' Multiple SQL Injections2005-12-20 · webapps · cfm · Verified
Impact
Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) series, (2) cat_parent, (3) cat, and (4) div parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quicksquare Development | Honeycomb Archive | Version 3.0 |
| Quicksquare Development | Honeycomb Archive Enterprise | Version 3.0 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html
- http://secunia.com/advisories/18127
- http://www.attrition.org/pipermail/vim/2006-March/000580.html
- http://www.osvdb.org/21827
- http://www.securityfocus.com/bid/15995
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23829
- http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html
- http://secunia.com/advisories/18127
- http://www.attrition.org/pipermail/vim/2006-March/000580.html
- http://www.osvdb.org/21827
- http://www.securityfocus.com/bid/15995
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23829