CVE-2005-1875

ALTO 7.5CVE-2005-1875 · Published 02/06/2005 · updated 16/06/2026

En resumen

CVE-2005-1875 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a exhibit engine (exhibit engine).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 69.4% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
exhibit engine exhibit_engine	`= 1.22= 1.54_rc4`	No fix yet

Description

Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) search_row, (2) sort_row, (3) order or (4) perpage parameter.

References

marc.info
photography-on-the.net/forum/showthread.php · Vendor Advisory
secunia.com/advisories/15583 · Patch
osvdb.org/17006 · Vendor Advisory
securityfocus.com/bid/13844 · Vendor Advisory

Más vulnerabilidades de exhibit engine

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free