SQL Injection Vulnerabilities in MySQL Eventum by MySQL

CVE-2005-2468

What is CVE-2005-2468?

MySQL Eventum 1.5.5 and earlier versions are susceptible to multiple SQL injection vulnerabilities. Remote attackers can exploit these flaws by invoking functions such as isCorrectPassword, userExist, or getCustomFieldReport, which are located in files like class.auth.php, custom_fields.php, and class.report.php. Additionally, the insert function in releases.php and class.release.php is also vulnerable. By successfully exploiting these vulnerabilities, attackers can execute arbitrary SQL commands, potentially compromising the integrity and security of the application.

References