Vulnerability in Duware Duamazon
CVE-2005-3976
SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter.
EPSS: 0.012 (65.3th percentile) — read the EPSS interpretation.
Affected products
- Duware Duamazon — versions 3.1
- Duware Duarticle — versions 1.1
- Duware Duclassified — versions 4.2
- Duware Dudirectory — versions 3.1
- Duware Dudirectory_pro — versions 3.0
- Duware Dudirectory_pro_sql — versions 3.0
- Duware Dudownload — versions 1.1
- Duware Dugallery — versions 3.3
- Duware Dunews — versions 1.1
- Duware Dupaypal — versions 3.1
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)