CVE-2005-1419

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Admin_id parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2005

CVE-2005-14205.0Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a request for an invaliCVE-2005-14215.0Directory traversal vulnerability in Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to read arbitrary files via ".." (dCVE-2005-14227.5Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a denial of service (serveCVE-2005-14236.4Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote attackers to cause a denial of service anCVE-2005-14242.1StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoText.bin file, which alCVE-2005-14255.0Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers CVE-2005-14265.0Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers toCVE-2005-14277.5Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information viCVE-2005-14287.5edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files.CVE-2005-14297.5SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password paraCVE-2005-14303.6Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is managed by a non-setuid program, which allows CVE-2005-14315.0The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly
CVE-2005-1419: High severity, CVSS 7.5 | Vulnix