CVEvulnerability
CVE-2005-4630
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) billshowid, (2) billdetailid, (3) fuse, and (4) frmClientID parameters.
Affected configurations
• clientexec clientexec 2.3
References
- http://pridels0.blogspot.com/2005/11/clientexec-2x-multiple-sql-inj.html pridels0.blogspot.com
- http://secunia.com/advisories/17756 Exploit, Patch, Vendor Advisory
- http://www.ce-talk.com/showthread.php?t=653 Patch
- http://www.clientexec.com/forum/showthread.php?t=8006 Patch
- http://www.osvdb.org/21163 Exploit
- http://www.vupen.com/english/advisories/2005/2628 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23271 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2005/11/clientexec-2x-multiple-sql-inj.html pridels0.blogspot.com
- http://secunia.com/advisories/17756 Exploit, Patch, Vendor Advisory
- http://www.ce-talk.com/showthread.php?t=653 Patch
- http://www.clientexec.com/forum/showthread.php?t=8006 Patch
- http://www.osvdb.org/21163 Exploit
- http://www.vupen.com/english/advisories/2005/2628 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23271 exchange.xforce.ibmcloud.com