CVEvulnerability
CVE-2005-4382
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to execute arbitrary SQL commands via the (1) nodeID, (2) pageID, (3) ID, and (4) parentid parameter to index.cfm; and (5) documentFormatId parameter to document/docWindow.cfm.
Affected configurations
• citysoft community enterprise
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/18145/ Vendor Advisory
- http://www.osvdb.org/21855 www.osvdb.org
- http://www.osvdb.org/21969 www.osvdb.org
- http://www.vupen.com/english/advisories/2005/2979 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23818 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/18145/ Vendor Advisory
- http://www.osvdb.org/21855 www.osvdb.org
- http://www.osvdb.org/21969 www.osvdb.org
- http://www.vupen.com/english/advisories/2005/2979 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23818 exchange.xforce.ibmcloud.com