CVE-2005-3315 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 5.4% (pctl 92)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 5.4% — more likely to be exploited than 92% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-10-30 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| novell | zenworks patch management server |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Novell ZENworks Patch Management 6.0.52 - '/computers/default.asp?Direction' SQL Injection | 2005-10-27 |
| exploit-db | Novell ZENworks Patch Management 6.0.52 - '/reports/default.asp' Multiple SQL Injections | 2005-10-27 |
References
- http://cirt.dk/advisories/cirt-39-advisory.pdf
- http://secunia.com/advisories/17358
- http://securityreason.com/securityalert/124
- http://securitytracker.com/id?1015116
- http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm
- http://www.kb.cert.org/vuls/id/536300
- http://www.osvdb.org/20362
- http://www.osvdb.org/20363
- http://www.securityfocus.com/archive/1/414880
- http://www.securityfocus.com/bid/15220
- http://www.vupen.com/english/advisories/2005/2238
- http://cirt.dk/advisories/cirt-39-advisory.pdf
- http://secunia.com/advisories/17358
- http://securityreason.com/securityalert/124
- http://securitytracker.com/id?1015116
- http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm
- http://www.kb.cert.org/vuls/id/536300
- http://www.osvdb.org/20362
- http://www.osvdb.org/20363
- http://www.securityfocus.com/archive/1/414880
→ the Explorer · watch your stack · NVD