CVE-2005-1633: SQL Injection
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) anzahlbeitraege parameter to jgsportal.php, 2) year parameter to (jgsportalstatistik.php, 3) year parameter to (jgsportalbeitraggraf.php, 4) tag parameter to (jgsportalviewsgraf.php, 5) year parameter to (jgsportalthemengraf.php, 6) year parameter to (jgsportalmitgraf.php, 7) id parameter to jgsportalsponsor.php, or (8) the Accept-Language header to jgsportallog.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1633?
CVE-2005-1633 is considered a critical vulnerability due to its potential for executing arbitrary SQL commands.
How do I fix CVE-2005-1633?
To fix CVE-2005-1633, upgrade JGS-Portal to version 3.0.3 or later to mitigate the SQL injection vulnerabilities.
What systems are affected by CVE-2005-1633?
CVE-2005-1633 affects JGS-Portal versions 3.0.2 and earlier.
What is the impact of exploiting CVE-2005-1633?
Exploiting CVE-2005-1633 allows attackers to manipulate the database and access sensitive information via SQL injection.
How can I detect CVE-2005-1633 in my application?
To detect CVE-2005-1633, conduct a security assessment that includes testing for SQL injection vulnerabilities in the affected parameters.