CVE-2005-1413

HIGH 7.5CVE-2005-1413 · Published 03/05/2005 · updated 16/06/2026

In short

CVE-2005-1413 is a HIGH (CVSS 7.5) vulnerability affecting envivo cms (envivosoft).
Chance of exploitation in the next 30 days (EPSS): 5.8%, higher than 93.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
envivo cms envivosoft	`= 3.54`	No fix yet

Description

Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username or (2) password parameters to admin_login.asp, or the (3) searchstring and possibly (4) ID parameters to default.asp.

References

digitalparadox.org/viewadvisories.ah · Exploit
marc.info
secunia.com/advisories/15173
securitytracker.com/id · Exploit
securityvulns.ru/Rdocument425.html
osvdb.org/15964
osvdb.org/15965
osvdb.org/15966
securityfocus.com/bid/13437
securityfocus.com/bid/13439
securityfocus.com/bid/13440
securityfocus.com/bid/24860
exchange.xforce.ibmcloud.com/vulnerabilities/20313

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free