CVE-2005-4168

Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the let parameter in a…

published December 11, 2005

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the let parameter in a viewlist action to titles.php and (2) the username.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03441 · 88.9th percentile
Published
2005-12-11T21:00Z
EPSS history
Timeline
  • 11 DEC 21:00Z
    Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the let parameter in a…
    cvelistv5