CVE-2005-1203

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arbitrary SQL commands via the (1) filter or (2) cats_app parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=111401760125555&w=2
http://secunia.com/advisories/14982Exploit, Patch
http://security.gentoo.org/glsa/glsa-200504-24.xmlPatch, Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=320768Patch, Vendor Advisory
http://www.gulftech.org/?node=research&article_id=00069-04202005
http://www.osvdb.org/15753
http://www.securityfocus.com/bid/13212Exploit, Patch
http://marc.info/?l=bugtraq&m=111401760125555&w=2
http://secunia.com/advisories/14982Exploit, Patch
http://security.gentoo.org/glsa/glsa-200504-24.xmlPatch, Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=320768Patch, Vendor Advisory
http://www.gulftech.org/?node=research&article_id=00069-04202005
http://www.osvdb.org/15753
http://www.securityfocus.com/bid/13212Exploit, Patch

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-12045.0Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a crafted pac CVE-2005-12055.0The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive env CVE-2005-12067.5Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows r CVE-2005-12077.2Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbit CVE-2005-120810.0Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbit CVE-2005-12115.1Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a CVE-2005-12127.5Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark CVE-2005-12137.5Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP s CVE-2005-12145.1Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a mal CVE-2005-12157.5Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP reques CVE-2005-12167.5Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA CVE-2005-12185.0The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial