Vulnerabilities > CVE-2005-4419 - Input Validation vulnerability in Quick Square Development Honeycomb Archive

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
quicksquare-development
exploit available
NVD
Published: 2005-12-20
Updated: 2017-07-20

Summary

Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) series, (2) cat_parent, (3) cat, and (4) div parameters.

Vulnerable Configurations

Part Description Count
Application
Quicksquare_Development
2

Exploit-Db

descriptionQuick Square Development Honeycomb Archive 3.0 CategoryResults.cfm Multiple Parameter SQL Injection. CVE-2005-4419 . Webapps exploit for cfm platform
idEDB-ID:26920
last seen2016-02-03
modified2005-12-20
published2005-12-20
reporterr0t3d3Vil
sourcehttps://www.exploit-db.com/download/26920/
titleQuick Square Development Honeycomb Archive 3.0 CategoryResults.cfm Multiple Parameter SQL Injection

References