// For flags

CVE-2005-2692

 

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) addquery and (2) subquery parameters to the newbb plus module, the forum parameter to (3) newtopic.php, (4) edit.php, or (5) reply.php in the newbb plus module, or (6) the msg_id parameter to print.php in the messages module.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2005-08-24 CVE Reserved
  • 2005-08-24 CVE Published
  • 2024-09-17 CVE Updated
  • 2024-09-17 EPSS Updated
  • 2024-09-17 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Runcms
Search vendor "Runcms"
 Runcms
Search vendor "Runcms" for product "Runcms"
 1.1
Search vendor "Runcms" for product "Runcms" and version "1.1"
-
Affected
Runcms
Search vendor "Runcms"
 Runcms
Search vendor "Runcms" for product "Runcms"
 1.1a
Search vendor "Runcms" for product "Runcms" and version "1.1a"
-
Affected
Runcms
Search vendor "Runcms"
 Runcms
Search vendor "Runcms" for product "Runcms"
 1.2
Search vendor "Runcms" for product "Runcms" and version "1.2"
-
Affected