CVE-2005-0302

Published: May 2, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header.

Affected (2)

Products: Comersus Open Technologies: Comersus Backoffice Lite

Comersus Open Technologies

1 product

Comersus Backoffice Lite

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Comersus Open Technologies Comersus Backoffice Lite	Version 6.0
Comersus Open Technologies Comersus Backoffice Lite	Version 6.1

References (6)

http://marc.info/?l=bugtraq&m=110636597832556&w=2

Source: cve@mitre.org

http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html

Source: cve@mitre.org

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/19013

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110636597832556&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/19013

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.