CVE-2005-0265

Published: May 2, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL commands via the (1) parent or (2) sortposted parameter.

Affected (2)

Products: Owl: Owl Intranet Engine

Owl

1 product

Owl Intranet Engine

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Owl Owl Intranet Engine	Version 0.7
Owl Owl Intranet Engine	Version 0.8

References (8)

http://marc.info/?l=bugtraq&m=110461644407935&w=2

Source: cve@mitre.org

http://secunia.com/advisories/13695

Source: cve@mitre.org

http://www.securityfocus.com/bid/12114

Source: cve@mitre.org

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/18704

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110461644407935&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/13695

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/12114

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/18704

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.