Search
Find a vulnerability
Search criteria
4 vulnerabilities found for zenworks_patch_management_server by novell
CVE-2006-6450 (GCVE-0-2006-6450)
Vulnerability from nvd – Published: 2006-12-10 21:00 – Updated: 2024-08-07 20:26
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://secure-support.novell.com/KanisaPlatform/… | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.vupen.com/english/advisories/2006/4864 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/21473 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/23243 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2006-12-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:26:46.615Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://secure-support.novell.com/KanisaPlatform/Publishing/298/3506963_f.SAL_Public.html"
},
{
"name": "zenworks-pmgmt-downloadreport-sql-injection(30768)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30768"
},
{
"name": "ADV-2006-4864",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/4864"
},
{
"name": "21473",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21473"
},
{
"name": "23243",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23243"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://secure-support.novell.com/KanisaPlatform/Publishing/298/3506963_f.SAL_Public.html"
},
{
"name": "zenworks-pmgmt-downloadreport-sql-injection(30768)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30768"
},
{
"name": "ADV-2006-4864",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/4864"
},
{
"name": "21473",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21473"
},
{
"name": "23243",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23243"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6450",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://secure-support.novell.com/KanisaPlatform/Publishing/298/3506963_f.SAL_Public.html",
"refsource": "CONFIRM",
"url": "https://secure-support.novell.com/KanisaPlatform/Publishing/298/3506963_f.SAL_Public.html"
},
{
"name": "zenworks-pmgmt-downloadreport-sql-injection(30768)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30768"
},
{
"name": "ADV-2006-4864",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/4864"
},
{
"name": "21473",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21473"
},
{
"name": "23243",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23243"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6450",
"datePublished": "2006-12-10T21:00:00.000Z",
"dateReserved": "2006-12-10T00:00:00.000Z",
"dateUpdated": "2024-08-07T20:26:46.615Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-3315 (GCVE-0-2005-3315)
Vulnerability from nvd – Published: 2005-10-30 20:00 – Updated: 2024-08-07 23:10
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://support.novell.com/cgi-bin/search/searchti… | x_refsource_CONFIRM |
| http://securityreason.com/securityalert/124 | third-party-advisoryx_refsource_SREASON |
| http://securitytracker.com/id?1015116 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/20363 | vdb-entryx_refsource_OSVDB |
| http://www.kb.cert.org/vuls/id/536300 | third-party-advisoryx_refsource_CERT-VN |
| http://secunia.com/advisories/17358 | third-party-advisoryx_refsource_SECUNIA |
| http://www.osvdb.org/20362 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/414880 | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/15220 | vdb-entryx_refsource_BID |
| http://www.vupen.com/english/advisories/2005/2238 | vdb-entryx_refsource_VUPEN |
| http://cirt.dk/advisories/cirt-39-advisory.pdf | x_refsource_MISC |
Date Public
2005-10-28 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:10:07.564Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm"
},
{
"name": "124",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/124"
},
{
"name": "1015116",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015116"
},
{
"name": "20363",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/20363"
},
{
"name": "VU#536300",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/536300"
},
{
"name": "17358",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/17358"
},
{
"name": "20362",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/20362"
},
{
"name": "20051027 [CIRT.DK] - Novell ZENworks Patch Management Server 6.0.0.52 - SQL injection",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/414880"
},
{
"name": "15220",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/15220"
},
{
"name": "ADV-2005-2238",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2005/2238"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://cirt.dk/advisories/cirt-39-advisory.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-10-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2005-11-04T10:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm"
},
{
"name": "124",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/124"
},
{
"name": "1015116",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015116"
},
{
"name": "20363",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/20363"
},
{
"name": "VU#536300",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/536300"
},
{
"name": "17358",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/17358"
},
{
"name": "20362",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/20362"
},
{
"name": "20051027 [CIRT.DK] - Novell ZENworks Patch Management Server 6.0.0.52 - SQL injection",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/414880"
},
{
"name": "15220",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/15220"
},
{
"name": "ADV-2005-2238",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2005/2238"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://cirt.dk/advisories/cirt-39-advisory.pdf"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3315",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm",
"refsource": "CONFIRM",
"url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm"
},
{
"name": "124",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/124"
},
{
"name": "1015116",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015116"
},
{
"name": "20363",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/20363"
},
{
"name": "VU#536300",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/536300"
},
{
"name": "17358",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/17358"
},
{
"name": "20362",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/20362"
},
{
"name": "20051027 [CIRT.DK] - Novell ZENworks Patch Management Server 6.0.0.52 - SQL injection",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/414880"
},
{
"name": "15220",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/15220"
},
{
"name": "ADV-2005-2238",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2005/2238"
},
{
"name": "http://cirt.dk/advisories/cirt-39-advisory.pdf",
"refsource": "MISC",
"url": "http://cirt.dk/advisories/cirt-39-advisory.pdf"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3315",
"datePublished": "2005-10-30T20:00:00.000Z",
"dateReserved": "2005-10-26T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:10:07.564Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-6450 (GCVE-0-2006-6450)
Vulnerability from cvelistv5 – Published: 2006-12-10 21:00 – Updated: 2024-08-07 20:26
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://secure-support.novell.com/KanisaPlatform/… | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.vupen.com/english/advisories/2006/4864 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/21473 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/23243 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2006-12-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:26:46.615Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://secure-support.novell.com/KanisaPlatform/Publishing/298/3506963_f.SAL_Public.html"
},
{
"name": "zenworks-pmgmt-downloadreport-sql-injection(30768)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30768"
},
{
"name": "ADV-2006-4864",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/4864"
},
{
"name": "21473",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21473"
},
{
"name": "23243",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23243"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://secure-support.novell.com/KanisaPlatform/Publishing/298/3506963_f.SAL_Public.html"
},
{
"name": "zenworks-pmgmt-downloadreport-sql-injection(30768)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30768"
},
{
"name": "ADV-2006-4864",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/4864"
},
{
"name": "21473",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21473"
},
{
"name": "23243",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23243"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6450",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://secure-support.novell.com/KanisaPlatform/Publishing/298/3506963_f.SAL_Public.html",
"refsource": "CONFIRM",
"url": "https://secure-support.novell.com/KanisaPlatform/Publishing/298/3506963_f.SAL_Public.html"
},
{
"name": "zenworks-pmgmt-downloadreport-sql-injection(30768)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30768"
},
{
"name": "ADV-2006-4864",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/4864"
},
{
"name": "21473",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21473"
},
{
"name": "23243",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23243"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6450",
"datePublished": "2006-12-10T21:00:00.000Z",
"dateReserved": "2006-12-10T00:00:00.000Z",
"dateUpdated": "2024-08-07T20:26:46.615Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-3315 (GCVE-0-2005-3315)
Vulnerability from cvelistv5 – Published: 2005-10-30 20:00 – Updated: 2024-08-07 23:10
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://support.novell.com/cgi-bin/search/searchti… | x_refsource_CONFIRM |
| http://securityreason.com/securityalert/124 | third-party-advisoryx_refsource_SREASON |
| http://securitytracker.com/id?1015116 | vdb-entryx_refsource_SECTRACK |
| http://www.osvdb.org/20363 | vdb-entryx_refsource_OSVDB |
| http://www.kb.cert.org/vuls/id/536300 | third-party-advisoryx_refsource_CERT-VN |
| http://secunia.com/advisories/17358 | third-party-advisoryx_refsource_SECUNIA |
| http://www.osvdb.org/20362 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/414880 | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/15220 | vdb-entryx_refsource_BID |
| http://www.vupen.com/english/advisories/2005/2238 | vdb-entryx_refsource_VUPEN |
| http://cirt.dk/advisories/cirt-39-advisory.pdf | x_refsource_MISC |
Date Public
2005-10-28 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:10:07.564Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm"
},
{
"name": "124",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/124"
},
{
"name": "1015116",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015116"
},
{
"name": "20363",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/20363"
},
{
"name": "VU#536300",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/536300"
},
{
"name": "17358",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/17358"
},
{
"name": "20362",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/20362"
},
{
"name": "20051027 [CIRT.DK] - Novell ZENworks Patch Management Server 6.0.0.52 - SQL injection",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/414880"
},
{
"name": "15220",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/15220"
},
{
"name": "ADV-2005-2238",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2005/2238"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://cirt.dk/advisories/cirt-39-advisory.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-10-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2005-11-04T10:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm"
},
{
"name": "124",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/124"
},
{
"name": "1015116",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015116"
},
{
"name": "20363",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/20363"
},
{
"name": "VU#536300",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/536300"
},
{
"name": "17358",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/17358"
},
{
"name": "20362",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/20362"
},
{
"name": "20051027 [CIRT.DK] - Novell ZENworks Patch Management Server 6.0.0.52 - SQL injection",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/414880"
},
{
"name": "15220",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/15220"
},
{
"name": "ADV-2005-2238",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2005/2238"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://cirt.dk/advisories/cirt-39-advisory.pdf"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3315",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm",
"refsource": "CONFIRM",
"url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm"
},
{
"name": "124",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/124"
},
{
"name": "1015116",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015116"
},
{
"name": "20363",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/20363"
},
{
"name": "VU#536300",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/536300"
},
{
"name": "17358",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/17358"
},
{
"name": "20362",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/20362"
},
{
"name": "20051027 [CIRT.DK] - Novell ZENworks Patch Management Server 6.0.0.52 - SQL injection",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/414880"
},
{
"name": "15220",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/15220"
},
{
"name": "ADV-2005-2238",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2005/2238"
},
{
"name": "http://cirt.dk/advisories/cirt-39-advisory.pdf",
"refsource": "MISC",
"url": "http://cirt.dk/advisories/cirt-39-advisory.pdf"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3315",
"datePublished": "2005-10-30T20:00:00.000Z",
"dateReserved": "2005-10-26T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:10:07.564Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}