CVE-2005-2045

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-06-22 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to default.asp, (2) iData parameter to detail.asp, (3) iMem parameter to members.asp, (4) iCat parameter to cat.asp, (5) offset parameter to members_listing_approval.asp, or (6) iChannel parameter to channels_edit.asp.

Affected products

Duware Duportal Pro: 3.4.3

References

http://echo.or.id/adv/adv19-theday-2005.txt
http://marc.info/?l=bugtraq&m=111945219205114&w=2
http://www.osvdb.org/17597
http://www.osvdb.org/17598
http://www.osvdb.org/17599
http://echo.or.id/adv/adv19-theday-2005.txt
http://marc.info/?l=bugtraq&m=111945219205114&w=2
http://www.osvdb.org/17597
http://www.osvdb.org/17598
http://www.osvdb.org/17599

Get alerted when CVE-2005-2045 or the next vulnerability affects your stack