CVE-2005-2478

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-08-05 · updated 2026-06-16

Description

SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel.

Affected products

Silver-Scripts Silvernews: 2.0.3

References

http://marc.info/?l=bugtraq&m=112309780321088&w=2
http://secunia.com/advisories/16315
http://securitytracker.com/id?1014622
http://www.osvdb.org/18517
http://www.rgod.altervista.org/silvernews.html
http://www.securityfocus.com/bid/14466
https://exchange.xforce.ibmcloud.com/vulnerabilities/21688
http://marc.info/?l=bugtraq&m=112309780321088&w=2
http://secunia.com/advisories/16315
http://securitytracker.com/id?1014622
http://www.osvdb.org/18517
http://www.rgod.altervista.org/silvernews.html

Get alerted when CVE-2005-2478 or the next vulnerability affects your stack