VULNERABILITY INTELLIGENCE
CVE-2005-2415
CVSS score7.5 HIGH
EPSS probability1.57%
CISA KEVNot currently listed
Published2005-08-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value parameter to the poll module or (2) pId parameter to the gallery module.
Primary references
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Exploit, Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory