← back
CVE-2005-3315

CVE-2005-3315

EPSS 5.4%
Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/26429unverifiedexploitdbwww.exploit-db.com/exploits/26430unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://cirt.dk/advisories/cirt-39-advisory.pdfhttp://secunia.com/advisories/17358http://securityreason.com/securityalert/124http://securitytracker.com/id?1015116http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htmhttp://www.kb.cert.org/vuls/id/536300http://www.osvdb.org/20362http://www.osvdb.org/20363http://www.securityfocus.com/archive/1/414880http://www.securityfocus.com/bid/15220http://www.vupen.com/english/advisories/2005/2238