CVE-2005-2468

{"id": "CVE-2005-2468", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-12-31T05:00:00.000", "references": [{"url": "http://lists.mysql.com/eventum-users/2072", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=112292193807958&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/16304", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1014603", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "http://www.gulftech.org/?node=research&article_id=00093-07312005", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/18403", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/18404", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/18405", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/18406", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/14437", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2005/1287", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) isCorrectPassword or (2) userExist function in class.auth.php, getCustomFieldReport function in (4) custom_fields.php, (5) custom_fields_graph.php, or (6) class.report.php, or the insert function in (7) releases.php or (8) class.release.php."}], "lastModified": "2016-10-18T03:27:38.993", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mysql:eventum:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3376760A-F66D-4AEA-8A8E-3ABEB39D67C5"}, {"criteria": "cpe:2.3:a:mysql:eventum:1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3BBA56E-6A81-4977-8C87-CD2A19C777B4"}, {"criteria": "cpe:2.3:a:mysql:eventum:1.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7982E45-2702-4120-87C3-0CB3F9DA0897"}, {"criteria": "cpe:2.3:a:mysql:eventum:1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B531FC5-154F-4858-BB5C-F1D3F752E2E2"}, {"criteria": "cpe:2.3:a:mysql:eventum:1.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12877C25-B604-450A-A527-4C223DC3DCEF"}, {"criteria": "cpe:2.3:a:mysql:eventum:1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3CD7BBB-5193-4159-AA56-554EFDBECE08"}, {"criteria": "cpe:2.3:a:mysql:eventum:1.5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE389FEE-6F5F-4950-988F-42A26D19EAB5"}, {"criteria": "cpe:2.3:a:mysql:eventum:1.5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F72E477-4851-4C6E-814E-7520AE764EF9"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}