VulnerabilityModified

CVE-2005-4711

SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Referer header.

MEDIUM 6.8EPSS 1.13%

Does this matter?

Lower severity and a low EPSS score (1.13%). Track it; it rarely justifies an emergency change on its own.

Description

SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Referer header. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS 2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 1.13% probability · 64th percentile
CISA KEV: Not listed
Weakness: CWE-89
Source: cve@mitre.org

References

http://secunia.com/advisories/16878Vendor Advisory
http://www.osvdb.org/19585
https://exchange.xforce.ibmcloud.com/vulnerabilities/22352
http://secunia.com/advisories/16878Vendor Advisory
http://www.osvdb.org/19585
https://exchange.xforce.ibmcloud.com/vulnerabilities/22352

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.