Vulnerabilities > CVE-2005-1479 - SQL Injection vulnerability in JGS-Portal ID Variable

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
jgs-xa
exploit available
NVD
Published: 2005-05-11
Updated: 2017-07-11

Summary

SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Vulnerable Configurations

Part Description Count
Application
Jgs-Xa
1

Exploit-Db

descriptionJGS-Portal 3.0.1 ID Variable SQL Injection Vulnerability. CVE-2005-1479 . Webapps exploit for php platform
idEDB-ID:25570
last seen2016-02-03
modified2005-04-30
published2005-04-30
reporter[email protected]
sourcehttps://www.exploit-db.com/download/25570/
titleJGS-Portal 3.0.1 ID Variable SQL Injection Vulnerability

References