Vulnerability Description
Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter in index.php and (2) the note parameter in blog.php.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netart Media | Blog System | 1.2 |
References
- http://pridels0.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html
- http://secunia.com/advisories/17893/Vendor Advisory
- http://securityreason.com/securityalert/230
- http://securitytracker.com/id?1015310Exploit
- http://www.osvdb.org/21453
- http://www.osvdb.org/21454
- http://www.securityfocus.com/archive/1/418640/100/0/threaded
- http://www.securityfocus.com/bid/15719/Exploit
- http://www.vupen.com/english/advisories/2005/2767
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23430
- http://pridels0.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html
- http://secunia.com/advisories/17893/Vendor Advisory
- http://securityreason.com/securityalert/230
- http://securitytracker.com/id?1015310Exploit
- http://www.osvdb.org/21453
FAQ
What is CVE-2005-4049?
CVE-2005-4049 is a vulnerability with a CVSS score of 7.5 (HIGH). Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter in index.php and (2) the note parameter in blog.php.
How severe is CVE-2005-4049?
CVE-2005-4049 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-4049?
Check the references section above for vendor advisories and patch information. Affected products include: Netart Media Blog System.