SecuritySpace - CVE-2005-2692

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2005-2692

Description: Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) addquery and (2) subquery parameters to the newbb plus module, the forum parameter to (3) newtopic.php, (4) edit.php, or (5) reply.php in the newbb plus module, or (6) the msg_id parameter to print.php in the messages module.

Test IDs: 1.3.6.1.4.1.25623.1.0.56875

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2005-2692
http://www.gulftech.org/?node=research&article_id=00094-08192005
http://secunia.com/advisories/16514

CVE ID:	CVE-2005-2692
Description:	Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) addquery and (2) subquery parameters to the newbb plus module, the forum parameter to (3) newtopic.php, (4) edit.php, or (5) reply.php in the newbb plus module, or (6) the msg_id parameter to print.php in the messages module.
Test IDs:	1.3.6.1.4.1.25623.1.0.56875
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2692 http://www.gulftech.org/?node=research&article_id=00094-08192005 http://secunia.com/advisories/16514