CVE-2005-1236

Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via the (1) iChannel…

published April 24, 2005

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to channel.asp or search.asp, (2) iData parameter to detail.asp or inc_rating.asp, (3) iCat parameter to detail.asp or type.asp, (4) DAT_PARENT parameter to inc_poll_voting.asp, or (5) iRate parameter to inc_rating.asp, a different set of vulnerabilities than CVE-2005-1224.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02411 · 84.0th percentile
Published
2005-04-24T04:00Z
EPSS history
Timeline
  • 24 APR 04:00Z
    Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via the (1) iChannel…
    cvelistv5