CVE-2005-4515— Lois Software WebDB搜索模块SQL注入漏洞
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2005-4515 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
SQL injection vulnerability in WebDB 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search parameters, possibly Search0. NOTE: the vendor has disputed this issue, saying that "WebDB is a generic online database system used by many of the clients of Lois Software. The flaw that was identified was some code that was added for a client to do some testing of his system and only certain safe commands were allowed. This code has now been removed and it is not now possible to use SQL queries as part of the query string. No installation or patch is required All clients use a common code library and have their own front end and databases and connections. So as soon as a change / upgrade / enhancement is made to the code, all users of the software begin to use the latest changes immediately." Since the issue appeared in a custom web site and no action is required on the part of customers, this issue should not be included in CVE
来源: 美国国家漏洞数据库 NVD
CVSS Information
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Title
Lois Software WebDB搜索模块SQL注入漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
** 争议 ** WebDB 1.1及更早版本存在SQL注入漏洞，远程攻击者可以通过未明搜索参数，可能是Search0，来执行任意SQL命令。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| - | n/a | n/a | - |
二、漏洞 CVE-2005-4515 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2005-4515 的情报信息
请登录查看更多情报信息。
CVE-2005-4515 厂商安全公告 (4)
CVE-2005-4515 安全博客文章 (1)
- Blog niet gevondenx_refsource_MISC
CVE-2005-4515 其他参考 (1)
- http://pridels0.blogspot.com/2005/12/webdb-sql-inj-vuln.htmlx_refsource_MISC
同批安全公告 · n/a · 2005-12-23 · 共 11 条
| CVE-2005-4509 | pTools Index.ASP SQL注入漏洞 | |
| CVE-2005-4510 | Extensis Portfolio Netpublish Server Server.NP目录遍历漏洞 | |
| CVE-2005-4511 | TN3270 Resource Gateway 格式化字符串漏洞 | |
| CVE-2005-4512 | WaxTrapp搜索模块跨站脚本攻击漏洞 | |
| CVE-2005-4513 | WandSoft E-Search跨站脚本攻击漏洞 | |
| CVE-2005-4514 | WebWasher恶意脚本过滤器绕过漏洞 | |
| CVE-2005-4505 | McAfee VirusScan路径指定权限提升漏洞 | |
| CVE-2005-4506 | Nexus Concepts Dev Hound多个漏洞 | |
| CVE-2005-4507 | Nexus Concepts Dev Hound多个漏洞 | |
| CVE-2005-4508 | Nexus Concepts Dev Hound 远程攻击漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2005-4515
暂无评论