VulnerabilityModified

CVE-2005-4702

SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter.

MEDIUM 6.4EPSS 1.03%

Does this matter?

Lower severity and a low EPSS score (1.03%). Track it; it rarely justifies an emergency change on its own.

Description

SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition, the demonstration code as used by third parties suggests that this might be a different type of vulnerability related to shell metacharacters. Finally, this could be a rediscovery of CVE-2004-1430.

CVSS 2.0: 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS: 1.03% probability · 62th percentile
CISA KEV: Not listed
Affected: ipbproarcade/ipbproarcade
Source: cve@mitre.org

References

http://www.securityfocus.com/bid/15205Exploit
http://www.securityfocus.com/bid/15205Exploit

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.