Vulnerability Description
Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) addquery and (2) subquery parameters to the newbb plus module, the forum parameter to (3) newtopic.php, (4) edit.php, or (5) reply.php in the newbb plus module, or (6) the msg_id parameter to print.php in the messages module.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Runcms | Runcms | 1.1 |
References
- http://secunia.com/advisories/16514Vendor Advisory
- http://www.gulftech.org/?node=research&article_id=00094-08192005ExploitVendor Advisory
- http://secunia.com/advisories/16514Vendor Advisory
- http://www.gulftech.org/?node=research&article_id=00094-08192005ExploitVendor Advisory
FAQ
What is CVE-2005-2692?
CVE-2005-2692 is a vulnerability with a CVSS score of 7.5 (HIGH). Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) addquery and (2) subquery parameters to the newbb plus module, the...
How severe is CVE-2005-2692?
CVE-2005-2692 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-2692?
Check the references section above for vendor advisories and patch information. Affected products include: Runcms Runcms.