CVEvulnerability
CVE-2005-4554
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in an openforum action (openforum.php) in index.php, (2) cat parameter in getfile.php, and (3) target parameter in download_now.php.
Affected configurations
• dev dev web management system 1.5
References
- http://rgod.altervista.org/dev_15_sql_xpl.html Exploit
- http://secunia.com/advisories/18239 Exploit, Vendor Advisory
- http://securitytracker.com/id?1015410 Exploit
- http://www.osvdb.org/22040 www.osvdb.org
- http://www.osvdb.org/22041 www.osvdb.org
- http://www.osvdb.org/22042 www.osvdb.org
- http://www.securityfocus.com/archive/1/420253/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16063 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23898 exchange.xforce.ibmcloud.com
- http://rgod.altervista.org/dev_15_sql_xpl.html Exploit
- http://secunia.com/advisories/18239 Exploit, Vendor Advisory
- http://securitytracker.com/id?1015410 Exploit
- http://www.osvdb.org/22040 www.osvdb.org
- http://www.osvdb.org/22041 www.osvdb.org
- http://www.osvdb.org/22042 www.osvdb.org
- http://www.securityfocus.com/archive/1/420253/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16063 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23898 exchange.xforce.ibmcloud.com