PT-2005-2477 · Aaron · Aaron Outpost Asp Inline Corporate Calendar

Zinho · Publicado 2005-05-11 · Atualizado 2017-07-11 · CVE-2005-1481

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Aaron Outpost ASP Inline Corporate Calendar (affected versions not specified)

Description: The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved by manipulating the Event ID parameter in specific API endpoints, such as "/defer.asp" or "/details.asp".

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-1481

Produtos afetados

Aaron Outpost Asp Inline Corporate Calendar

Referências · 7

• http://secunia.com/advisories/15239 · Nota
• http://osvdb.org/16193 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1481 · Nota de Segurança
• http://osvdb.org/16192 · Nota
• http://securitytracker.com/id?1013884 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20416 · Nota
• http://marc.info/?l=bugtraq&m=111530675909673&w=2 · Nota