CVE-2005-2478

ALTO 7.5CVE-2005-2478 · Published 05/08/2005 · updated 16/06/2026

In breve

CVE-2005-2478 è una vulnerabilità ALTO (CVSS 7.5) che riguarda silvernews (silver-scripts).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 74.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
silvernews silver-scripts	`= 2.0.3`	No fix yet

Description

SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel.

References

marc.info
secunia.com/advisories/16315 · Patch
securitytracker.com/id
osvdb.org/18517
rgod.altervista.org/silvernews.html · Exploit
securityfocus.com/bid/14466
exchange.xforce.ibmcloud.com/vulnerabilities/21688

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free