mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-08-04 08:44:25 +00:00
122 lines
4.1 KiB
JSON
122 lines
4.1 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "cve@mitre.org",
|
|
"ID": "CVE-2005-4427",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "n/a",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_parser.php, (4) $a_address variable in structs.php, (5) kbid parameter to cer_KnowledgebaseHandler.class.php, (6) queues[] parameter to addresses_export.php, (7) $thread variable to display.php, (8) ticket parameter to display_ticket_thread.php."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "21991",
|
|
"refsource": "OSVDB",
|
|
"url": "http://www.osvdb.org/21991"
|
|
},
|
|
{
|
|
"name": "21993",
|
|
"refsource": "OSVDB",
|
|
"url": "http://www.osvdb.org/21993"
|
|
},
|
|
{
|
|
"name": "20051219 Cerberus Helpdesk vulnerabilities",
|
|
"refsource": "FULLDISC",
|
|
"url": "http://marc.info/?l=full-disclosure&m=113500878630130&w=2"
|
|
},
|
|
{
|
|
"name": "21992",
|
|
"refsource": "OSVDB",
|
|
"url": "http://www.osvdb.org/21992"
|
|
},
|
|
{
|
|
"name": "16062",
|
|
"refsource": "BID",
|
|
"url": "http://www.securityfocus.com/bid/16062"
|
|
},
|
|
{
|
|
"name": "21995",
|
|
"refsource": "OSVDB",
|
|
"url": "http://www.osvdb.org/21995"
|
|
},
|
|
{
|
|
"name": "21990",
|
|
"refsource": "OSVDB",
|
|
"url": "http://www.osvdb.org/21990"
|
|
},
|
|
{
|
|
"name": "18112",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/18112"
|
|
},
|
|
{
|
|
"name": "21988",
|
|
"refsource": "OSVDB",
|
|
"url": "http://www.osvdb.org/21988"
|
|
},
|
|
{
|
|
"name": "21994",
|
|
"refsource": "OSVDB",
|
|
"url": "http://www.osvdb.org/21994"
|
|
},
|
|
{
|
|
"name": "cerberus-multiple-sql-injection(23836)",
|
|
"refsource": "XF",
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23836"
|
|
},
|
|
{
|
|
"name": "20051225 Cerberus Helpdesk multiple vulnerabilities.",
|
|
"refsource": "BUGTRAQ",
|
|
"url": "http://www.securityfocus.com/archive/1/420271/100/0/threaded"
|
|
},
|
|
{
|
|
"name": "http://forum.cerberusweb.com/showthread.php?s=&postid=30315",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://forum.cerberusweb.com/showthread.php?s=&postid=30315"
|
|
}
|
|
]
|
|
}
|
|
} |