CVE-2005-4362: SQL Injection
Published Dec 20, 2005
·Updated
SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Affected Software
1 affected component
Komodo Komodo CMS=2.1
Remediation
Patch Available
Event History
Dec 20, 2005
CVE Published
01:03 AM
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker can exploit it over the network without authentication, by sending a crafted value in the page parameter to page.php.
2
What is the impact of successful exploitation?
Successful exploitation allows execution of arbitrary SQL commands. The reported impact includes modification of data, while confidentiality and availability impacts are not indicated in the provided vector.
3
Is a fix available?
Yes. A patch is available.