Executive Summary

Informations
Name CVE-2005-1203 First vendor Publication 2005-05-02
Vendor Cve Last vendor Modification 2016-10-18

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score 7.5 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arbitrary SQL commands via the (1) filter or (2) cats_app parameter.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1203

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 4

OpenVAS Exploits

Date Description
2008-09-24 Name : Gentoo Security Advisory GLSA 200504-24 (eGroupWare)
File : nvt/glsa_200504_24.nasl
2008-09-04 Name : FreeBSD Ports: egroupware
File : nvt/freebsd_egroupware.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
15753 eGroupWare index.php cats_app Parameter SQL Injection

eGroupWare contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the 'cats_app' variable in the index.php script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.
15752 eGroupWare tts/index.php filter Parameter SQL Injection

eGroupWare contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the 'filter' variable in the tts/index.php script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.

Nessus® Vulnerability Scanner

Date Description
2005-08-01 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_b4892b5bfb1c11d996ba00909925db3e.nasl - Type : ACT_GATHER_INFO
2005-04-25 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-200504-24.nasl - Type : ACT_GATHER_INFO
2004-11-13 Name : The remote web server contains a PHP application that is vulnerable to multip...
File : egroupware_unknown_vuln.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/13212
BUGTRAQ http://marc.info/?l=bugtraq&m=111401760125555&w=2
CONFIRM http://sourceforge.net/project/shownotes.php?release_id=320768
GENTOO http://security.gentoo.org/glsa/glsa-200504-24.xml
MISC http://www.gulftech.org/?node=research&article_id=00069-04202005
OSVDB http://www.osvdb.org/15753
SECUNIA http://secunia.com/advisories/14982

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
Date Informations
2021-05-04 12:02:54
  • Multiple Updates
2021-04-22 01:03:08
  • Multiple Updates
2020-05-23 00:16:30
  • Multiple Updates
2016-10-18 12:01:39
  • Multiple Updates
2016-06-28 15:16:30
  • Multiple Updates
2016-04-26 13:26:21
  • Multiple Updates
2014-02-17 10:31:03
  • Multiple Updates
2013-05-11 11:24:12
  • Multiple Updates