VULNERABILITY INTELLIGENCE
CVE-2005-4554
CVSS score7.5 HIGH
EPSS probability3.85%
CISA KEVNot currently listed
Published2005-12-28
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in an openforum action (openforum.php) in index.php, (2) cat parameter in getfile.php, and (3) target parameter in download_now.php.
Primary references
- cve@mitre.org — Exploit
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org — Exploit
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Exploit
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit