high7.5Public exploit code
CVE-2005-4563
SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execute arbitrary SQL commands and bypass log…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Enterprise Connector 1.0.2 - 'main.php' SQL Injection2005-12-20 · webapps · php · Verified
Impact
SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the loginid parameter, a different vulnerability than CVE-2005-3875.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Enterprise Heart | Enterprise Connector | Version 1.0.2 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=full-disclosure&m=113510305413525&w=2
- http://secunia.com/advisories/17743
- http://securityreason.com/securityalert/278
- http://www.osvdb.org/22163
- http://www.securityfocus.com/archive/1/419895
- http://www.securityfocus.com/bid/15984
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23845
- http://marc.info/?l=full-disclosure&m=113510305413525&w=2
- http://secunia.com/advisories/17743
- http://securityreason.com/securityalert/278
- http://www.osvdb.org/22163
- http://www.securityfocus.com/archive/1/419895
- http://www.securityfocus.com/bid/15984
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23845