VulnerabilityModified

CVE-2005-2468

MEDIUM 6.4EPSS 2.04%

Does this matter?

Lower severity and a low EPSS score (2.04%). Track it; it rarely justifies an emergency change on its own.

Description

Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) isCorrectPassword or (2) userExist function in class.auth.php, getCustomFieldReport function in (4) custom_fields.php, (5) custom_fields_graph.php, or (6) class.report.php, or the insert function in (7) releases.php or (8) class.release.php.

CVSS 2.0: 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS: 2.04% probability · 80th percentile
CISA KEV: Not listed
Affected: mysql/eventum
Source: cve@mitre.org

References

http://lists.mysql.com/eventum-users/2072Patch
http://marc.info/?l=bugtraq&m=112292193807958&w=2
http://secunia.com/advisories/16304Patch, Vendor Advisory
http://securitytracker.com/id?1014603Exploit, Patch
http://www.gulftech.org/?node=research&article_id=00093-07312005Exploit
http://www.osvdb.org/18403Exploit, Patch
http://www.osvdb.org/18404Exploit, Patch
http://www.osvdb.org/18405Exploit, Patch
http://www.osvdb.org/18406Exploit, Patch
http://www.securityfocus.com/bid/14437Exploit
http://www.vupen.com/english/advisories/2005/1287
http://lists.mysql.com/eventum-users/2072Patch
http://marc.info/?l=bugtraq&m=112292193807958&w=2
http://secunia.com/advisories/16304Patch, Vendor Advisory
http://securitytracker.com/id?1014603Exploit, Patch
http://www.gulftech.org/?node=research&article_id=00093-07312005Exploit
http://www.osvdb.org/18403Exploit, Patch
http://www.osvdb.org/18404Exploit, Patch
http://www.osvdb.org/18405Exploit, Patch
http://www.osvdb.org/18406Exploit, Patch
http://www.securityfocus.com/bid/14437Exploit
http://www.vupen.com/english/advisories/2005/1287

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.