Vulnerabilities > CVE-2005-3315 - SQL Injection vulnerability in Novell Zenworks Patch Management Server 6.0.0.52

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
novell
exploit available
NVD
Published: 2005-10-30
Updated: 2011-03-08

Summary

Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp.

Vulnerable Configurations

Part Description Count
Application
Novell
1

Exploit-Db

descriptionNovell ZENworks Patch Management 6.0 .52 computers/default.asp Direction Parameter SQL Injection. CVE-2005-3315. Webapps exploit for asp platform
idEDB-ID:26429
last seen2016-02-03
modified2005-10-27
published2005-10-27
reporterDennis Rand
sourcehttps://www.exploit-db.com/download/26429/
titleNovell ZENworks Patch Management 6.0.52 - computers/default.asp Direction Parameter SQL Injection

References