CVE-2005-0463 - Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown imp

CVE-2005-0463

Summary

Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in (1) host.php, (2) port.php, and (3) index.php.

References

http://secunia.com/advisories/14321
http://securitytracker.com/id?1013220
http://www.inl.fr/article.php3?id_article=7
http://www.osvdb.org/13853
http://www.securityfocus.com/bid/12610

Vulnerable Configurations

cpe:2.3:a:inl:ulog-php:0.8:*:*:*:*:*:*:*
cpe:2.3:a:inl:ulog-php:0.8:*:*:*:*:*:*:*
cpe:2.3:a:inl:ulog-php:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:inl:ulog-php:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:inl:ulog-php:0.8.2:*:*:*:*:*:*:*
cpe:2.3:a:inl:ulog-php:0.8.2:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 05-09-2008 - 20:46)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	12610
confirm	http://www.inl.fr/article.php3?id_article=7
osvdb	13853
sectrack	1013220
secunia	14321

Last major update

05-09-2008 - 20:46

Published

02-05-2005 - 04:00

Last modified

05-09-2008 - 20:46