high7.5
CVE-2005-4615
SQL injection vulnerability in news.php in DapperDesk 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.
Impact
SQL injection vulnerability in news.php in DapperDesk 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2005/11/dapperdesk-30x-page-sql-inj.html
- http://www.osvdb.org/21315
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24354
- http://pridels0.blogspot.com/2005/11/dapperdesk-30x-page-sql-inj.html
- http://www.osvdb.org/21315
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24354