Vulnerabilities > CVE-2005-4664 - SQL-Injection vulnerability in Ocomon 1.21

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
ocomon
exploit available
NVD
Published: 2005-12-31
Updated: 2017-07-20

Summary

SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662.

Vulnerable Configurations

Part Description Count
Application
Ocomon
1

Exploit-Db

idEDB-ID:40285
last seen2018-11-30
modified2016-08-22
published2016-08-22
reporterExploit-DB
sourcehttps://www.exploit-db.com/download/40285
titleOcomon 2.0 - SQL Injection

References