CVEvulnerability

CVE-2005-4608

7.5 HIGH Published 2005-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via the (1) devWherePair[0], (2) orderBy, and (3) where parameters.

Affected configurations

• incogen bugport 1.039 • incogen bugport 1.040 • incogen bugport 1.041 • incogen bugport 1.042 • incogen bugport 1.043 • incogen bugport 1.044 • incogen bugport 1.045 • incogen bugport 1.046 • incogen bugport 1.047 • incogen bugport 1.048 • incogen bugport 1.049 • incogen bugport 1.050 • incogen bugport 1.051 • incogen bugport 1.052 • incogen bugport 1.053 • incogen bugport 1.054 • incogen bugport 1.055 • incogen bugport 1.056 • incogen bugport 1.057 • incogen bugport 1.058 • incogen bugport 1.059 • incogen bugport 1.060 • incogen bugport 1.061 • incogen bugport 1.062 • incogen bugport 1.063 • incogen bugport 1.064 • incogen bugport 1.065 • incogen bugport 1.066 • incogen bugport 1.067 • incogen bugport 1.068 • incogen bugport 1.069 • incogen bugport 1.070 • incogen bugport 1.071 • incogen bugport 1.072 • incogen bugport 1.073 • incogen bugport 1.074 • incogen bugport 1.075 • incogen bugport 1.076 • incogen bugport 1.077 • incogen bugport 1.078 • incogen bugport 1.079 • incogen bugport 1.080 • incogen bugport 1.081 • incogen bugport 1.082 • incogen bugport 1.083 • incogen bugport 1.084 • incogen bugport 1.085 • incogen bugport 1.086 • incogen bugport 1.087 • incogen bugport 1.088 • incogen bugport 1.089 • incogen bugport 1.090 • incogen bugport 1.091 • incogen bugport 1.092 • incogen bugport 1.093 • incogen bugport 1.094 • incogen bugport 1.095 • incogen bugport 1.096 • incogen bugport 1.097 • incogen bugport 1.098 … and 49 more

References