Vulnerabilities > CVE-2005-2009 - SQL-Injection vulnerability in Ublog Reload 1.0.5

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
ublog
exploit available
NVD
Published: 2005-06-20
Updated: 2016-10-18

Summary

Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) ci, (2) d, or (3) m parameter to index.asp, or the (4) bi parameter to blog_comment.asp.

Vulnerable Configurations

Part Description Count
Application
Ublog
1

Exploit-Db

  • descriptionUblog Reload 1.0.5 blog_comment.asp y Parameter SQL Injection. CVE-2005-2009. Webapps exploit for asp platform
    idEDB-ID:25844
    last seen2016-02-03
    modified2005-06-20
    published2005-06-20
    reporterDedi Dwianto
    sourcehttps://www.exploit-db.com/download/25844/
    titleUblog Reload 1.0.5 blog_comment.asp y Parameter SQL Injection
  • descriptionUblog Reload 1.0.5 index.asp Multiple Parameter SQL Injection. CVE-2005-2009 . Webapps exploit for asp platform
    idEDB-ID:25843
    last seen2016-02-03
    modified2005-06-20
    published2005-06-20
    reporterDedi Dwianto
    sourcehttps://www.exploit-db.com/download/25843/
    titleUblog Reload 1.0.5 index.asp Multiple Parameter SQL Injection

References