SQL Injection Vulnerability in Interchange by ICESoft
CVE-2005-3072

Currently unrated

Key Information:

Vendor: Interchange Development Group
Status: Interchange
Vendor: CVE Published:; 27 September 2005

🔔 Create Interchange Development Group Vulnerability Alert

What is CVE-2005-3072?

The SQL injection vulnerability in Interchange versions 4.9.3 through 5.2.0 is found in the 'pages/forum/submit.html' component. This flaw allows remote attackers to send crafted SQL statements to the database, leading to unauthorized database access and manipulation. Exploitation of this vulnerability can result in the execution of arbitrary SQL commands, posing a significant risk to data integrity and confidentiality.

References

http://www.securityfocus.com/bid/14931

vdb-entryx_refsource_BID

http://www.vupen.com/english/advisories/2005/1829

vdb-entryx_refsource_VUPEN

https://exchange.xforce.ibmcloud.com/vulnerabilities/22386

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 27, 2005
Vulnerability Reserved
Sep 27, 2005

CVE-2005-3072 Data

JSON